Multiple TGT's to the same principal.

John Hascall john at iastate.edu
Tue Nov 20 09:05:36 EST 2007



> Hi,
> 
> Is it possible to request more than one TGT , if multiple servers
> share the same principal and care to don't send requests with the same
> timestamp?

    Typically, servers do not request tickets (including TGTs) at all
    unless they are also functioning as a client.  Servers keep their
    key in local storage.

    If a client needs to talk to multiple servers that share the same
    principal, then it needs only one TGT (and one service ticket).

> I'm working to integrate the SIP protocol with Kerberos, as a option
> for a Key Management Protocol like MIKEY, to provide a "share key by
> demand".


John



More information about the Kerberos mailing list