Is "SPN advertisement" or well-known SPNs a security hole?

[Srinivas Kakde]

Hello,



There is an old posting to samba-technical



http://lists.samba.org/archive/samba-technical/2007-July/054354.html



This message says: From a security standpoint, allowing the server to specify its  
service principal is a "bad idea".

Why it a bad idea?  



I am writing to the Kerberos list because I think the answer would be interesting to all developers of Kerberized applications not just to people who watch  samba-technical.


Thank you.













      ____________________________________________________________________________________
Looking for last minute shopping deals?  
Find them fast with Yahoo! Search.  http://tools.search.yahoo.com/newsearch/category.php?category=shopping