EAP-Kerberos

Sam Hartman hartmans-ietf at MIT.EDU
Thu Jul 14 16:23:18 EDT 2005


In general you want to combine case 1 and case 2.  So that if the user
has no ticket you get one, then you use that to get a ticket for the
accesspoint.  You certainly never want to give the access point or EAP
server the password.

I'd recommend talking to Derek Atkins about your proposal.



More information about the Kerberos mailing list