Differentiate the ServiceTicket issued from Kinit vs PKinit

Aravind Jerubandi aravind.jerubandi at gmail.com
Fri May 22 14:03:46 EDT 2015


Today we use password based authentication (kinit). And we want to
introduce PKinit. But while validating ServiceTicket we would like to know
if the service ticket issued through Kinit to PKinit

Is there a way to find this?

If not, the other solution is to use different realms for Kinit and Pkinit.
But then we will have duplicate all the user and service principals for the
two realms. Is there any other easier solution?

Any help would be much appreciated.


More information about the Kerberos mailing list