Re: systematic Kerberization

[Havoc Pennington <hp redhat com>]

On Tue, 2004-05-11 at 10:26, Chris Ricker wrote:
> I'm well aware of how it works. I'm also aware that it doesn't solve the
> problem of wanting to work disconnected. Kerberos ticket caching still
> requires initial connectivity. It also does nothing for LDAP, NIS, etc.
> You'd need a totally new ad-hoc caching mechanism above and beyond the krb
> ticket cache, and I don't think it would turn out to be something any sane
> organization would want.... Local accounts, OTOH, are an access control
> mechanism that is at least well-understood, which is why our standard is to
> fall back to them if distributed is unavailable.

What does Windows do for laptops?

Havoc