RX Kerberos 5 security class requirements of Kerberos library

Sam Hartman hartmans at MIT.EDU
Tue Jan 2 11:41:42 EST 2007


>>>>> "Jeffrey" == Jeffrey Altman <jaltman at secure-endpoints.com> writes:

    Jeffrey> Before I submit a patch, is the concept of
    Jeffrey> krb5_generate_creds_with_keytab something that MIT and
    Jeffrey> Heimdal would accept?  If so, a patch can be ready in a
    Jeffrey> few hours.

I'm very uncomfortable with this.  IT takes the KDC out of the loop
for generating service tickets.  I'm not sure how it will interact
with future plans for use of authorization data, ticket extensions,
etc.

--Sam




More information about the krbdev mailing list