[krbdev.mit.edu #8814] Listing third-party KDC modules

Дилян Палаузов via RT rt-comment at KRBDEV-PROD-APP-1.mit.edu
Fri Jun 21 16:02:48 EDT 2019


Hello,

I tried to get information on the Samba roadmap.  In order to get access to the bugzilla, one has to write motivation,
and after my email from 10 June (attached), nothing happened.

Nevertheless, please document the known third-party modules, that work to any extend mit MIT Kerberos.

Kind regards
  Дилян Палаузов

On Mon, 2019-06-10 at 00:21 -0400, Greg Hudson via RT wrote:
> I am not sure what the Samba roadmap entry is referring to.  The MIT 
> KDC has supported within-realm S4U2Self since release 1.8.  In release 
> 1.17, the KDC supports cross-realm S4U2Self, if the KDB module issues 
> appropriate realm referrals.  This KDC work was done by a Samba 
> developer, so it is my understanding that the Samba KDB module can 
> issue those referrals.
> 
> (There is another S4U2Self case where the client is identified by X.509 
> certificate instead of principal name.  This case will be supported in 
> release 1.18, provided that the KDB module implements a new lookup 
> function.)



More information about the krb5-bugs mailing list