Kerberos through gateway

Sebastian Hanigk hanigk at in.tum.de
Tue Mar 4 03:24:46 EST 2008


"Casey T. Deccio" <ctdecci at sandia.gov> writes:

> I have a network on which machines do not have direct access outside.
> Instead they are required to go through a particular machine which acts
> as a gateway/proxy for various services.  I'd like to have the inside
> machines request kerberos tickets from this gateway, which will send the
> requests as a proxy.  The only reference to something like this that
> I've been able to find is IAKERB [1], which is apparently Internet-draft
> status, and for which I haven't seen any implementations.
>
> Any ideas?

You could use NAT for Kerberos connections and request addressless
tickets.


Sebastian



More information about the Kerberos mailing list