From owner-cvs-all Thu Sep 24 01:04:05 1998 Return-Path: Received: (from daemon@localhost) by hub.freebsd.org (8.8.8/8.8.8) id BAA21208 for cvs-all-outgoing; Thu, 24 Sep 1998 01:04:05 -0700 (PDT) (envelope-from owner-cvs-all) Received: from ifi.uio.no (ifi.uio.no [129.240.64.2]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id BAA21173; Thu, 24 Sep 1998 01:03:58 -0700 (PDT) (envelope-from dag-erli@ifi.uio.no) Received: from hati.ifi.uio.no (2602@hati.ifi.uio.no [129.240.65.143]) by ifi.uio.no (8.8.8/8.8.7/ifi0.2) with ESMTP id KAA17358; Thu, 24 Sep 1998 10:03:12 +0200 (MET DST) Received: (from dag-erli@localhost) by hati.ifi.uio.no ; Thu, 24 Sep 1998 10:03:12 +0200 (MET DST) Mime-Version: 1.0 To: Matthew Dillon Cc: Mark Murray , Mike Smith , asami@FreeBSD.ORG (Satoshi Asami), committers@FreeBSD.ORG Subject: Re: Security and other facilities at WC CDROM - the plan. References: <199809232357.QAA04981@dingo.cdrom.com> <199809240655.IAA21484@gratis.grondar.za> <199809240728.AAA17646@apollo.backplane.com> Organization: University of Oslo, Department of Informatics X-url: http://www.stud.ifi.uio.no/~dag-erli/ X-other-addresses: 'finger dag-erli@ifi.uio.no' for a list X-disclaimer-1: The views expressed in this article are mine alone, and do X-disclaimer-2: not necessarily coincide with those of any organisation or X-disclaimer-3: company with which I am or have been affiliated. X-Stop-Spam: http://www.cauce.org/ From: dag-erli@ifi.uio.no (Dag-Erling C. =?iso-8859-1?Q?Sm=F8rgrav?= ) Date: 24 Sep 1998 10:03:11 +0200 In-Reply-To: Matthew Dillon's message of "Thu, 24 Sep 1998 00:28:37 -0700 (PDT)" Message-ID: Lines: 13 X-Mailer: Gnus v5.5/Emacs 19.34 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by hub.freebsd.org id BAB21200 Sender: owner-cvs-all@FreeBSD.ORG X-Loop: FreeBSD.org Precedence: bulk Matthew Dillon writes: > Make sure you setup two kerberos servers rather then just one. Also, > put the following line in /etc/csh.logout on all the machines. It is > extremely important to destroy tickets on logout. > > # System-wide .logout file for csh(1). > /usr/bin/klist -s && /usr/bin/kdestroy Don't assume everybody uses csh. DES (rabid bash zealot) -- Dag-Erling Smørgrav - dag-erli@ifi.uio.no