[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Kerberos4 and check-ticket-addresses

On Tue, 2003-05-06 at 05:43, Harald Barth wrote:
> Love writes...
> > Oh, forwarding tickets isn't really supported in Kerberos 4, it just works
> > with kaserver since kaserver doesn't check the address in the ticket.
> And krb4 tgts should have problems when forwarding between machines
> with different endianess if I remember correct.

ssh deals with that issue (but not ticket addresses).  Copying a ticket
file loses that way, though.

brandon s allbery [openafs/solaris/japh/freebsd] allbery@kf8nh.apk.net
system administrator [linux/heimdal/too many hats] allbery@ece.cmu.edu
electrical and computer engineering                              KF8NH
carnegie mellon university  [better check the oblivious first -ke6sls]