kerberos testing server/realm

Greg Hudson ghudson at mit.edu
Tue Sep 2 12:53:31 EDT 2014


On 09/02/2014 04:20 AM, bodik wrote:
> But I was thinking, if there would be something like "static_kdc.c" ? some very
> small implementation without all fancy features like PA, crossrealming, heavy
> encryption, something which would just send out session keys to everybody having
> some static secrets for anyone ... ?

> Is there anything like that or even could be this possible ?
> Or am I completely our of line ?

It's possible in theory, but I don't think it would decrease the
administrative burden of deploying it by much, so it wouldn't warrant
the development burden of maintaining an additional KDC implementation.


More information about the Kerberos mailing list