Re: KDC model and atomicity

On Mon, 2012-06-25 at 12:39 -0400, Sam Hartman wrote:
> Hmm.  Another concern I have mostly about process is that this seems
> like a very late point in the process to be introducing the concept of
> read-only attributes into the information model.
> It seems like working through the semantics of that could be tricky. 

Actually, the more I think about that, the more I agree.  So far, we've
stuck more or less to modeling data the KDC actually has and maintains
and that one would reasonably expect to be able to modify via some sort
of administrative interface.  Adding what are essentially counters and
statistics might be useful for various purposes, but it is semantically
very different from what we've done so far.

I think perhaps it might be best to leave such properties for later.


> In another message, Nico said that it seems important to have a way to
> unlock a principal.
> I agree with that; that seems fairly important functionality to have
> standardized admin clients.

I agree.

-- Jeff

_______________________________________________
ietf-krb-wg mailing list
[email protected]
https://lists.anl.gov/mailman/listinfo/ietf-krb-wg