On Fri, 18 Jun 2004, Eric Knauel wrote: > Both krb5 aklog plugins, Ragnars and yours, don't call unlog on > logout. I wonder, what is the reason for this and is this harmless? Well, it presumably means the next login with that uid will have those tokens. And in fact if you did the unlog it would mean if same uid still had sessions logged in, they'd go away.