Use ssh key to acquire TGT?

Thomas Kula kula at tproa.net
Fri Jun 1 09:17:51 EDT 2007


On Fri, Jun 01, 2007 at 06:59:04AM -0500, John Hascall wrote:
> 
> But, your point is well taken.  Perhaps
> what would be more useful is if somebody
> like educase served as a central crossrealm
> hub (everyone exchanges keys with them and
> gets a current capaths file).
> 

I've often considered the possibility of setting up something
like cross-realm.org to do just this thing in a general case.
But it's never been anything more than a passing fancy, as
there are very few realms where I know that, yes, this person
actually can speak with some authority about $REALM and I 
know I'm actually generating cross-realm keys that are sane
and proper. 

-- 
Thomas L. Kula | kula at tproa.net | http://kula.tproa.net/



More information about the Kerberos mailing list