Support for RFC 5178/5179
Osipov, Michael
michael.osipov at siemens.com
Wed Apr 20 04:26:56 EDT 2016
Hi folks,
are there any plans to support RFC 5178 [1], 5179 [2]?
Those domain-based SPNs are very often used in Active Directory, especially for LDAP
services. I have justed kvno(1) for fake TGS requests for this. It works to some extent
but NT_PRINCINAL is provided over the wire and not at least SRV-INST with three components.
Regards,
Michael Osipov
More information about the Kerberos
mailing list