Received: from pacific-carrier-annex.mit.edu (PACIFIC-CARRIER-ANNEX.MIT.EDU [18.7.21.83]) by krbdev.mit.edu (8.9.3) with ESMTP id OAA29161; Tue, 10 Dec 2002 14:56:17 -0500 (EST)
Received: from konishi-polis.mit.edu (KONISHI-POLIS.MIT.EDU [18.18.3.10]) by pacific-carrier-annex.mit.edu (8.9.2/8.9.2) with ESMTP id OAA11886 for <krb5-bugs@mit.edu>; Tue, 10 Dec 2002 14:56:17 -0500 (EST)
Received: by konishi-polis.mit.edu (Postfix, from userid 8042) id 102F215216E; Tue, 10 Dec 2002 14:56:08 -0500 (EST)
To: krb5-bugs@mit.edu
Subject: kadmin should not authenticate simply to run the ktrem command
Message-Id: <20021210195608.102F215216E@konishi-polis.mit.edu>
Date: Tue, 10 Dec 2002 14:56:08 -0500 (EST)
From: hartmans@MIT.EDU (Sam Hartman)
X-RT-Original-Encoding: iso-8859-1
Content-Length: 250



Kadmin requires that I authenticate to the admin server in order to
remove a key from my local keytab.  This is annoying.



It is hard to fix because of the structure of the kadmin program.  IT
may be easier to move this functionality into ktutil