directory-kerby mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Lin Chen" <linch...@foxmail.com>
Subject Re: About TokenPreauth related configurations
Date Mon, 30 Nov 2015 11:17:56 GMT
I agreed. And I will make the refactor. Thanks~


Regards,
Lin




------------------ Original ------------------
From:  "zhengkai";<kai.zheng@intel.com>;
Date:  Fri, Nov 20, 2015 00:06 AM
To:  "kerby@directory.apache.org"<kerby@directory.apache.org>; 

Subject:  About TokenPreauth related configurations



Hi,

I just noticed we had added the following listed configuration items in KDC side. I guess
they're for the TokenPreauth mechanism.
    VERIFY_KEY(),
    DECRYPTION_KEY(),
ISSUERS();

It looks like they're too short or not clear in which domain in the global configuration namespace.
I would change them to be something like follows.
    TOKEN_VERIFY_KEYS(),
    TOKEN_DECRYPTION_KEYS(),
TOKEN_ISSUERS();

I guess such change may affect you, so please be noted. Also let me know if you have any concern
or suggestion. Thanks.

Regards,
Kai
Mime
  • Unnamed multipart/alternative (inline, 8-Bit, 0 bytes)
View raw message