Session tickets - question

Benjamin Kaduk kaduk at mit.edu
Wed Feb 1 23:54:14 EST 2017


On Wed, Feb 01, 2017 at 03:10:31PM +0000, Michalewicz, Brian R (CTO Technology) wrote:
> Good morning !!   are session tickets forwardable ?

The question could probably do with a more concrete statement.
(I assume you mean service tickets, not session tickets, which are a TLS thing.)

Taking a guess that you mean to forward a session ticket instead of a TGT,
e.g., while ssh-ing to a remote host, I believe that the protocol supports
that but that implementation support is lacking, as it's a rather unusual
thing to want to do.

-Ben


More information about the Kerberos mailing list