gssftpd and gss_acquire_cred

Love Hörnquist Åstrand lha at kth.se
Tue Nov 17 16:43:02 EST 2009


17 nov 2009 kl. 11:43 skrev Sam Hartman:

>>>>>> "Love" == Love Hörnquist Åstrand <lha at kth.se> writes:
> 
>    Love> If you care about the name, check service afterward.  
>    Love> The
>    Love> server probably doesn't know all names the kdc have given it
>    Love> though aliases.
> 
> This is not an issue for MIT Kerberos > 1.7.  We use the name from the
> key we matched and ignore the name in the ticket.

So then all application needs to be aware what the admin stuff into the keytab ? Same problem different scale.

Love






More information about the krbdev mailing list