Sam Hartman hartmans at MIT.EDU
Tue Nov 23 12:55:54 EST 2004

>>>>> "Ahluwalia," == Ahluwalia, Ish <iahluwalia at> writes:

    Ahluwalia,> It's actually part of a KRB_ERROR message as per
    Ahluwalia,> Kerberos Specification (Revision 8).  It contains the
    Ahluwalia,> Sequence number contained in the AP_REQ.  It's part of
    Ahluwalia,> AppSpecificTypedData which can be used to bind a
    Ahluwalia,> KRB-ERROR message to the sequence number from an
    Ahluwalia,> authenticator.  -----

Kerberos revisions 08 is a dead end; the IETF has decided not to go in
that direction for the Kerberos protocol.  Please look at
draft-ietf-krb-wg-kerberos-clarifications and
draft-yu-kerberos-extensions instead.


More information about the Kerberos mailing list