Reuse of GSSAPI Tokens

Jiva DeVoe jiva at devoesquared.com
Thu Jul 21 13:58:52 EDT 2005


Thanks, that's what I needed to know. :)

On Jul 21, 2005, at 12:11 PM, Nicolas Williams wrote:

> On Thu, Jul 21, 2005 at 12:03:46PM -0400, Jiva DeVoe wrote:
>
>> I'm not sure what this means.
>>
>> Is it possible to use the token twice?  Or not?
>>
>> I mean, obviously, I could reuse the context itself... am just
>> curious if kerberos defines that a token may not be used to establish
>> more than one context.
>>
>
> Kerberos does that, yes.
>
>
>> What is Replay caching?
>>
>
> There's a cache of AP-REQs that have been seen in the time skew window
> (+- 5 minutes), and none are accepted that have been seen or which  
> fall
> outside the replay window.
>

--
Jiva DeVoe
http://www.devoesquared.com
PowerCard - Intuitive Project Management Software for Mac OS X



More information about the krbdev mailing list