directory-kerby mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Zheng, Kai" <kai.zh...@intel.com>
Subject RE: About TokenPreauth related configurations
Date Tue, 01 Dec 2015 06:53:02 GMT
Thanks Lin for making the change!

Regards,
Kai

-----Original Message-----
From: Lin Chen [mailto:linchen7@foxmail.com] 
Sent: Monday, November 30, 2015 7:18 PM
To: kerby <kerby@directory.apache.org>
Subject: Re: About TokenPreauth related configurations

I agreed. And I will make the refactor. Thanks~


Regards,
Lin




------------------ Original ------------------
From:  "zhengkai";<kai.zheng@intel.com>;
Date:  Fri, Nov 20, 2015 00:06 AM
To:  "kerby@directory.apache.org"<kerby@directory.apache.org>; 

Subject:  About TokenPreauth related configurations



Hi,

I just noticed we had added the following listed configuration items in KDC side. I guess
they're for the TokenPreauth mechanism.
    VERIFY_KEY(),
    DECRYPTION_KEY(),
ISSUERS();

It looks like they're too short or not clear in which domain in the global configuration namespace.
I would change them to be something like follows.
    TOKEN_VERIFY_KEYS(),
    TOKEN_DECRYPTION_KEYS(),
TOKEN_ISSUERS();

I guess such change may affect you, so please be noted. Also let me know if you have any concern
or suggestion. Thanks.

Regards,
Kai

Mime
View raw message