RE: Something Stronger than a Passphrase? (UNCLASSIFIED)

["Friedrichs, Paul D CTR DISA PEO-IAN" <Paul.Friedrichs.ctr@disa.mil>]

Classification:  UNCLASSIFIED 
Caveats: NONE

 

> -----Original Message-----
> From: Jim Basney [mailto:jbasney@ncsa.uiuc.edu] 
> Sent: Wednesday, April 11, 2007 5:44 PM
> To: Friedrichs, Paul D CTR DISA PEO-IAN
> Cc: myproxy-users@ncsa.uiuc.edu
> Subject: Re: Something Stronger than a Passphrase? (UNCLASSIFIED)
...
> > I get the impression my "myproxy-init
> > --retrievable_by_cert dn --no_passphrase" would force me to 
> put a new 
> > credential every time I want to use a new application proxy.
> 
> True.
> 
> > Should the
> > user, above, not include "--no_passphrase," not ever give the 
> > passphrase to prospective proxies and only use the passphrase in 
> > subsequent commands to modify who can retrieve proxy certs?
> 
> The ability to modify a credential's policy after it's stored 
> on the server as you describe would be useful, but it's not 
> implemented.

Can there be multiple "--retrievable_by_cert dn" in the myproxy-init?

Thanks,
Classification:  UNCLASSIFIED 
Caveats: NONE