On Wednesday, August 09, 2006 02:55:05 PM -0500 "Douglas E. Engert" 
<[EMAIL PROTECTED]> wrote:

>> __gss_userok() is not; should it be?
>
> I would say yes. Every service needs to do this, and use the GSS creds
> to test if it can use the local resource. So it in that regards it is
> generic.

Actually, many services don't need to do this.  An SSH server may want a 
machenism-independent "userok" API to determine whether to allow access to 
a local account, but lots of services have nothing to do with local 
accounts.
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

Reply via email to