[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: delegation question

Thanks to those who responded to my question on delegation.  I like the answer Bill and Carl gave.  I had been thinking in terms of one policy engine that would check both the login authorization and the creation of login certificates.  The use of a separate component, with its own policy engine, for the generation of certificates solves the problem neatly.
Steve Koehler               
Secure Computing Corporation