Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 12 Mar 1996 11:44:45 -0500
From:      "Garrett A. Wollman" <wollman@lcs.mit.edu>
To:        Mark Murray <mark@grondar.za>
Cc:        "Garrett A. Wollman" <wollman@lcs.mit.edu>, freebsd-current@freebsd.org
Subject:   Re: HEADS UP! Please check... 
Message-ID:  <9603121644.AA12584@halloran-eldar.lcs.mit.edu>
In-Reply-To: <199603112042.WAA04844@grumble.grondar.za>
References:  <199603112042.WAA04844@grumble.grondar.za>

next in thread | previous in thread | raw e-mail | index | archive | help
<<On Mon, 11 Mar 1996 22:42:20 +0200, Mark Murray <mark@grondar.za> said:

> My philosohy on this one was that if there was not an acl entry for
> the guy, no matter what, then he wasn't allowed in. I'm sure I could
> look for the above case and add it in. Others' comments? How does this
> new variant "feel" to you?

Many sites may not want to use the Kerberized `su' for private reasons
of their own.  `su' should take the non-existence of ~root/.klogin as an
indication of this and go back to UNIX / S/Key authentication.  (Just
as one example, a site may want to force everyone to use S/Key for
`su', since they can't trust the network connection over which a user
is logged in.)

-GAWollman

--
Garrett A. Wollman   | Shashish is simple, it's discreet, it's brief. ... 
wollman@lcs.mit.edu  | Shashish is the bonding of hearts in spite of distance.
Opinions not those of| It is a bond more powerful than absence.  We like people
MIT, LCS, ANA, or NSA| who like Shashish.  - Claude McKenzie + Florent Vollant



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?9603121644.AA12584>