Re: Admin session expiry

2019-01-13 Thread Jeffrey Hutzelman
It's not necessary to disable the admin principal or expire the session to get this effect. The admin service is itself a Kerberos-authenticated service, and Kerberos tickets expire. Without valid tickets for the admin service, it is not possible to make a request, regardless of whether or not

Re: Admin session expiry

2019-01-13 Thread John Devitofranceschi
On Jan 13, 2019, at 1:49 AM, Greg Hudson wrote: > > On 1/11/19 11:08 AM, Yegui Cai wrote: >> Any plan to add the capability of expiring admin sessions into a future >> release? > > We can consider it, although it would come at a complexity cost in the > network code. Can you describe why that