I've updated the subject since the design issue is not Vista-UAC-
specific.

A single system-wide ccache isn't going to solve the problem if it is 
indexed by logon session id (LSID).  

The real problem is the use of LSID, which is different between the 
user's logon session and an elevated process spawned by the session.  
What identifier can be used that will be the same for the logon session 
and an elevated process it spawns?

Should this discussion continue on krbdev?
_______________________________________________
kfwdev mailing list
kfwdev@mit.edu
http://mailman.mit.edu/mailman/listinfo/kfwdev

Reply via email to