PROXY tickets and GSSAPI

Sam Hartman hartmans at MIT.EDU
Thu Jun 27 18:11:01 EDT 2002

>>>>> "Douglas" == Douglas E Engert <deengert at> writes:

    Douglas> The problem is the GSSPAI only has a single delegte flag,
    Douglas> which is used for delegting a TGT. which is also
    Douglas> forwardable.

    Douglas> The GSSAPi extensions we are proposing at the GGF next
    Douglas> month might address this problem, by allowing more input
    Douglas> to the GSS delegtion process, including delegation at any
    Douglas> time.

Doug, why are you proposing GSSAPI extensions outside of the IETf
context?  It annoys a lot of people, makes it harder to write
interoperable software, and reduces the quality of the final spces.

More information about the krbdev mailing list