Fw: SSO with telnet/rlogin/rsh

Kevin Coffman kwc at citi.umich.edu
Tue Jan 15 15:47:57 EST 2008


On Jan 15, 2008 3:19 PM, Douglas E. Engert <deengert at anl.gov> wrote:
>
>
> Ken Hornstein wrote:
> >>  That is what DCE did. The PAG number was part of the cache name in
> >> a well know location.
> >
> > I don't want the cache in a "well known location". I want to tell the OS
> > or some utility, "Hey, here's my TGT", or perhaps even, "Talk to me on this
> > socket/port/door to get a ticket for a service".
>
> Sounds even better.

We are planning on using the Linux kernel's keyring facility to do
this.  The kernel side of that work for NFSv4/rpcsecgss is currently
on hold waiting for some other pieces to fall in place.

K.C.



More information about the Kerberos mailing list