FORWARDABLE

Gustavo V. G. C. Rios gustavo.rios at terra.com.br
Mon Dec 1 09:29:00 EST 2003


Sam Hartman wrote:
> 
> >>>>> "Gustavo" == Gustavo V G C Rios <gustavo.rios at terra.com.br> writes:
> 
>     Gustavo> I have reading RFC 1510 to understand how kerberos
>     Gustavo> works. Some thing a very confusing for me. For instance:
> 
>     Gustavo> Suppose i have a TGT and i want it to be renewd. So i use
>     Gustavo> the TGS_REQ for this, ok?  At the momment, this TGT has
>     Gustavo> the forwarable bit on (1). But since i am only request it
>     Gustavo> to be renewd, i dow not specify the KDCoption
>     Gustavo> forwardable. Then what happens ?
> 
> At seems that the MIT KDC at least preserves the forwardable bit in
> this case.

Ok! What is the rationale having non TGT as forwardable ? And Proxiable
? Sorry, but i could not understand.


More information about the Kerberos mailing list