[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Kerberos4 and check-ticket-addresses

To: Harald Barth <haba@pdc.kth.se>
Subject: Re: Kerberos4 and check-ticket-addresses
From: "Brandon S. Allbery "KF8NH <allbery@ece.cmu.edu>
Date: 06 May 2003 11:20:02 -0400
Cc: ahaupt@ifh.de, heimdal-discuss@sics.se
In-Reply-To: <20030506.114304.23777009.haba@pdc.kth.se>
References: <amwuh5cfkg.fsf@nutcracker.stacken.kth.se> <Pine.LNX.4.51.0305060750560.21500@juno.ifh.de> <am1xzccuhw.fsf@nutcracker.stacken.kth.se> <20030506.114304.23777009.haba@pdc.kth.se>
Sender: owner-heimdal-discuss@sics.se

On Tue, 2003-05-06 at 05:43, Harald Barth wrote:
> Love writes...
> > Oh, forwarding tickets isn't really supported in Kerberos 4, it just works
> > with kaserver since kaserver doesn't check the address in the ticket.
> 
> And krb4 tgts should have problems when forwarding between machines
> with different endianess if I remember correct.

ssh deals with that issue (but not ticket addresses).  Copying a ticket
file loses that way, though.

-- 
brandon s allbery [openafs/solaris/japh/freebsd] allbery@kf8nh.apk.net
system administrator [linux/heimdal/too many hats] allbery@ece.cmu.edu
electrical and computer engineering                              KF8NH
carnegie mellon university  [better check the oblivious first -ke6sls]

References:
- Re: Kerberos4 and check-ticket-addresses
  - From: Love <lha@stacken.kth.se>
- Re: Kerberos4 and check-ticket-addresses
  - From: Andreas Haupt <ahaupt@ifh.de>
- Re: Kerberos4 and check-ticket-addresses
  - From: Love <lha@stacken.kth.se>
- Re: Kerberos4 and check-ticket-addresses
  - From: Harald Barth <haba@pdc.kth.se>

Prev by Date: Re: Kerberos4 and check-ticket-addresses
Next by Date: Problems with getipnodebyname
Prev by thread: Re: Kerberos4 and check-ticket-addresses
Next by thread: Re: Kerberos4 and check-ticket-addresses
Index(es):
- Date
- Thread