Configuring OTPOverRadius

Russ Allbery rra at
Mon Aug 5 12:44:59 EDT 2013

Greg Hudson <ghudson at MIT.EDU> writes:

> Russ Allbery's pam_krb5 supports "anon_fast" and "fast_ccache" options.
> (A "fast_keytab" option would also be interesting, but it doesn't appear
> to exist yet, and arguably some of that complexity should be moved into
> libkrb5.)

Yeah, I didn't implement that for the first round because it's fairly easy
to turn fast_keytab into fast_ccache using k5start.  It wouldn't be too
difficult to add, but indeed it would be even nicer if you could just tell
libkrb5 to use a keytab and a principal in that keytab to get the FAST
armor tickets.

Russ Allbery (rra at             <>

More information about the krbdev mailing list