disallow requests naming principal as a service

Matt Crawford crawdad at fnal.gov
Wed Mar 27 09:44:01 EST 2002

> It is generally the case that Kerberos clients fetch service
> tickets before attempting to connect to the services, after all.

??!??  I have not found this to be the case with the common clients.
They either do a rudimentary negotiation (telnet, ftp) or other test
(r-commands) before going to the KDC.

More information about the krbdev mailing list