[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: delegation question

To: spki@c2.net
Subject: Re: delegation question
From: "Stephen C. Koehler" <koehler@securecomputing.com>
Date: Wed, 17 Dec 1997 13:20:41 -0600
In-Reply-To: Your message of "Wed, 17 Dec 1997 01:26:35 EST." <3.0.3.32.19971217012635.00a687c0@cybercash.com>
Sender: owner-spki@c2.net


Thanks to those who responded to my question on delegation.  I like the answer Bill and Carl gave.  I had been thinking in terms of one policy engine that would check both the login authorization and the creation of login certificates.  The use of a separate component, with its own policy engine, for the generation of certificates solves the problem neatly.
-- 
Steve Koehler               
Secure Computing Corporation
koehler@securecomputing.com

References:

Re: delegation question

From: Carl Ellison <cme@cybercash.com>

Prev by Date: Re: Out on a loop
Next by Date: Re: delegation question
Prev by thread: Re: delegation question
Next by thread: Re: delegation question
Index(es):
- Main
- Thread