kerberos query

Vipin Rathor v.rathor at
Tue Sep 11 08:55:34 EDT 2007


Is anyone aware of any Kerberos applications (Open-AFS,Secure linux etc)
which makes use of "authorization-data" field present in the Kerberos ticket
to store some additional authorization related information ?

The "authorization-data" field is explained in the EncTicketPart ::=
[APPLICATION 3] exaplantion of RFC 4120 under section 5.3.
I wanted to know if it has ever been used by anyone , and if so who are they
? Becuase to my knowledge MIT Kerberos does not provide any exported APIs
for end application that can use this feild to store additional
authorization information (please correct me if I am wrong) ?

Thanks in advance...

More information about the krbdev mailing list