Impact of "MS AD Kerberos token size" change

saggar sunil.saggar at gmail.com
Fri May 14 01:36:09 EDT 2010


On Apr 29, 4:43 pm, JC Ferguson <j... at f5.com> wrote:
> I have found the change not necessary in the MIT library.  I've seen tokens as large as 24k from MS AD domain controllers.
>
> -jc
>
> ----- Original Message -----
> From: krbdev-boun... at mit.edu <krbdev-boun... at mit.edu>
> To: kerbe... at mit.edu <kerbe... at mit.edu>; krb... at mit.edu <krb... at mit.edu>
> Sent: Thu Apr 29 07:30:52 2010
> Subject: Impact of "MS AD Kerberos token size" change
>
> Is MIT kerberos implementation dependent on Microsoft AD Kerberos Token Size
> ?  If a user changes the default size from 12K to 64K . does it needs a
> change in kerberos also ?
>
> --
> Regards
> Sunil Saggar
> _______________________________________________
> krbdev mailing list             krb... at mit.eduhttps://mailman.mit.edu/mailman/listinfo/krbdev

I would like to understand how this token is used and how MIT library
is not dependent on it. Will appreciate code_pointers/documentation.

-S



More information about the Kerberos mailing list