FORWARDABLE
Gustavo V. G. C. Rios
gustavo.rios at terra.com.br
Mon Dec 1 09:29:00 EST 2003
Sam Hartman wrote:
>
> >>>>> "Gustavo" == Gustavo V G C Rios <gustavo.rios at terra.com.br> writes:
>
> Gustavo> I have reading RFC 1510 to understand how kerberos
> Gustavo> works. Some thing a very confusing for me. For instance:
>
> Gustavo> Suppose i have a TGT and i want it to be renewd. So i use
> Gustavo> the TGS_REQ for this, ok? At the momment, this TGT has
> Gustavo> the forwarable bit on (1). But since i am only request it
> Gustavo> to be renewd, i dow not specify the KDCoption
> Gustavo> forwardable. Then what happens ?
>
> At seems that the MIT KDC at least preserves the forwardable bit in
> this case.
Ok! What is the rationale having non TGT as forwardable ? And Proxiable
? Sorry, but i could not understand.
More information about the Kerberos
mailing list