Re: The usability of service ticket lifetimes
"Henry B. Hotz" <[email protected]> Tue, 21 Aug 2012 14:08:21 -0700
| Newsgroups | gmane.ietf.krb-wg |
|---|---|
| Message-ID | <[email protected]> |
On Aug 21, 2012, at 1:33 PM, Jeffrey Altman wrote: > Your rule assumes that policy changes are enforced upon TGT renewals and > my rule assumes that policy changes are enforced upon all ticket > renewals. I hope that policy changes are enforced during the issuance > of all tickets and not just TGTs. Are there any currently deployed implementations which will directly renew service tickets? I've always thought the concept of a renewable non-tgt was counter to the design. Is this is aimed at the efficiency problems with Java not caching service tickets? I thought I saw some traffic about fixing that. Checking. . . ------------------------------------------------------ The opinions expressed in this message are mine, not those of Caltech, JPL, NASA, or the US Government. [email protected], or [email protected] _______________________________________________ ietf-krb-wg mailing list [email protected] https://lists.anl.gov/mailman/listinfo/ietf-krb-wg