[32228] in Kerberos
Re: Snapshot of monthly KDC traffic for stanford.edu
daemon@ATHENA.MIT.EDU (Russ Allbery)
Thu Apr 1 19:36:41 2010
From: Russ Allbery <rra@stanford.edu>
To: kerberos@mit.edu
In-Reply-To: <285210236.1336081270164928269.JavaMail.root@zm-mbx-levy.zimbra.upenn.edu>
(Mark Sirota's message of "Thu, 1 Apr 2010 19:35:28 -0400 (EDT)")
Date: Thu, 01 Apr 2010 16:36:37 -0700
Message-ID: <87fx3ebv96.fsf@windlord.stanford.edu>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Mark Sirota <msirota@isc.upenn.edu> writes:
> ----- "Russ Allbery" <rra@stanford.edu> wrote:
>> I'm intrigued by the *huge* margin between the number of initial
>> authentications and the number of service tickets issued. This appears
>> to be due to a couple of factors: ...
> Could also be from applications that are attempting to do password
> verification by getting a TGT and then failing to complete the process
> by trying to use it for something. I know we found one popular Java
> library that does that.
Yeah, I'm wondering if Zimbra fails to actually verify the user's
credentials against a local keytab. That would certainly explain a lot of
these, from people using mail clients that are doing password over TLS.
--
Russ Allbery (rra@stanford.edu) <http://www.eyrie.org/~eagle/>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
