directory-kerby mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Zheng, Kai" <kai.zh...@intel.com>
Subject About TokenPreauth related configurations
Date Thu, 19 Nov 2015 16:06:00 GMT
Hi,

I just noticed we had added the following listed configuration items in KDC side. I guess
they're for the TokenPreauth mechanism.
    VERIFY_KEY(),
    DECRYPTION_KEY(),
ISSUERS();

It looks like they're too short or not clear in which domain in the global configuration namespace.
I would change them to be something like follows.
    TOKEN_VERIFY_KEYS(),
    TOKEN_DECRYPTION_KEYS(),
TOKEN_ISSUERS();

I guess such change may affect you, so please be noted. Also let me know if you have any concern
or suggestion. Thanks.

Regards,
Kai

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message