Auditing Feature in Kerberos

Jeffrey Hutzelman jhutz at cmu.edu
Mon Mar 27 19:10:30 EST 2006



On Wednesday, March 22, 2006 09:19:39 AM -0500 Jeffrey Altman 
<jaltman at mit.edu> wrote:

> I'm wondering if it might be useful to store a hash of issued tickets
> in the audit log.  We can then also log the hash of the presented
> ticket in the audit log for the purpose of providing a binding.

Interestinly, that same idea came up in an offline conversation I had
recently about this issue.  I think it's a good one.

-- Jeff



More information about the krbdev mailing list