[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Extract Keytab permissions




Alf Wachsmann <alfw@slac.stanford.edu> writes:

> do you have another patch like this so that a user can view his/her
> own but no other KDC entry just like this was the case in AFS.
>
> "kas examine" worked for your own account. To view others you needed
> to have the ADMIN flag set.
>
> It was always handy that users could get the age of their own password.

Yes, that would probably be a good idea. I need to go over the attributes
and see which of them that can be security exported to the user.

Love

PGP signature