preauth code questions

Luke Howard lukeh at
Thu Apr 22 02:45:55 EDT 2010

On 22/04/2010, at 2:32 AM, Jeff Blaine wrote:

>>> * Is the client's IP address available in a preauth plugin?
>> It doesn't look like it.
> My KDC preauth plugin wants to connect back to a service on
> the client host.
> So I guess I'm screwed as far as making this a KDC-side-only
> plugin?

How about tunnelling the data in the KDC reply and having the client send to the client-side service?

-- Luke

More information about the krbdev mailing list