S4U2proxy & cross-realm

Peter Mogensen apm at one.com
Wed Jan 22 09:32:10 EST 2014


Hi,

I found this old discussion:
http://kerberos.996246.n3.nabble.com/AD-SIGNEDPATH-and-cross-realm-td27623.html

It seems krb5-1.12 still strips AD-SIGNEDPATH when issuing cross-realm 
TGT's.

Are there any news on this issue?
Like Loves suggestion to checksum the AD-SIGNEDPATH with the target 
realm cross-realm key when issuing cross-ream TGTs?

/Peter



More information about the Kerberos mailing list