Configuring OTPOverRadius

[Russ Allbery]

Greg Hudson <ghudson at MIT.EDU> writes:

> Russ Allbery's pam_krb5 supports "anon_fast" and "fast_ccache" options.
> (A "fast_keytab" option would also be interesting, but it doesn't appear
> to exist yet, and arguably some of that complexity should be moved into
> libkrb5.)

Yeah, I didn't implement that for the first round because it's fairly easy
to turn fast_keytab into fast_ccache using k5start.  It wouldn't be too
difficult to add, but indeed it would be even nicer if you could just tell
libkrb5 to use a keytab and a principal in that keytab to get the FAST
armor tickets.

-- 
Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>