Kerberos implementation

Russ Allbery rra at
Wed Aug 29 21:51:40 EDT 2012

li tai <ltai0618 at> writes:

> I have a question regarding to whether Kerberos can be configured to
> support BOTH PKI and username/password at the same time.  I have an
> environment where I plan to use username/password for human
> authentication and use PKI for the network device authentication.

Yes.  You can use a mix of traditional string-to-key password
authentication and PKINIT within the same realm.

Russ Allbery (rra at             <>

More information about the krbdev mailing list