Re: KDC model and atomicity

>>>>> "Nico" == Nico Williams <[email protected]> writes:

    Nico> At most?  As long as it isn't "at least".

    >> Same deal with timestamp of last successful/unsuccessful/attempt.

<hat role="individual">
I'm actually quite uncomfortable standardizing three sets of semantics
here.
That doesn't provide a very reasonable management experience. Given the
number of KDC implementations out there, it effectively means that there
will be no interoperability.
If we can't narrow beyond that, why not drop the feature  as something
where we cannot agree on standard behavior?
_______________________________________________
ietf-krb-wg mailing list
[email protected]
https://lists.anl.gov/mailman/listinfo/ietf-krb-wg