Subject: RE: draft-ietf-cat-kerberos-set-passwd-00.txt

From: "John Brezak (Exchange)" <[email-masked]>
Date: Sun, 19 Sep 1999 22:11:17 -0700

The re-change password suggestion is best handled by policy, not by an
addition to the protocol. I can see many different "policy" based options
that can be applied when a set password operation is attempted.

> -----Original Message-----
> From: Matt Crawford [mailto:[email-masked]]
> Sent: Friday, September 17, 1999 9:28 AM
> To: [email-masked]; [email-masked]; Mike Swift (NT)
> (Exchange); John Brezak (Exchange)
> Cc: [email-masked]
> Subject: draft-ietf-cat-kerberos-set-passwd-00.txt
> 
> 
>    AP-REQ length: length of AP-REP data, in bytes. If the 
> length is zero,
> 
> Typo?
> 
>    [2] M. Horowitz. Kerberos Change Password Protocol.
>    ftp://ds.internic.net/internet-drafts/
>    draft-ietf-cat-kerb-chg-password-02.txt
> 
> No such host as ds.internic.net, and no such draft on ftp.ietf.org or
> ftp.isi.edu.
> 
> 
> I would like there to be an indication in the request that the
> needchange flag should be set for the target principal, so that the
> user could then immediately re-change the password despite a min_life
> in the principal's policy.
> 
> 			Matt Crawford
> 
==========================================================================
This message was posted through the Stanford campus mailing list
server.  If you wish to unsubscribe from this mailing list, send the
message body of "unsubscribe ietf-cat-wg" to [email-masked]