preauth code questions

[Luke Howard]

On 22/04/2010, at 2:32 AM, Jeff Blaine wrote:

>>> * Is the client's IP address available in a preauth plugin?
>> 
>> It doesn't look like it.
> 
> My KDC preauth plugin wants to connect back to a service on
> the client host.
> 
> So I guess I'm screwed as far as making this a KDC-side-only
> plugin?


How about tunnelling the data in the KDC reply and having the client send to the client-side service?

-- Luke