Russ Allbery <[EMAIL PROTECTED]> writes:

> I'm pleased to announce release 3.8 of kstart.

> Changes from previous release:

>     Allow -H to be used with a command in k4start and k5start.  In this
>     case, check the existing ticket cache and authenticate if it's
>     stale, then run the command in either case.  This is useful when
>     running several commands with the same credentials at near the same
>     time.  It reduces Kerberos traffic and avoids service ticket
>     requests being rejected as possible relay attacks.

This new feature didn't work quite right when running an aklog program.
aklog wasn't run unless new tickets were obtained, even though a new PAG
was created, so the command didn't have valid tokens.  I've fixed that bug
and released kstart 3.9.

All other details remain the same.

-- 
Russ Allbery ([EMAIL PROTECTED])             <http://www.eyrie.org/~eagle/>
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

Reply via email to