Kerberos implementation

[Russ Allbery]

li tai <ltai0618 at gmail.com> writes:

> I have a question regarding to whether Kerberos can be configured to
> support BOTH PKI and username/password at the same time.  I have an
> environment where I plan to use username/password for human
> authentication and use PKI for the network device authentication.

Yes.  You can use a mix of traditional string-to-key password
authentication and PKINIT within the same realm.

-- 
Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>