[29412] in Kerberos

home help back first fref pref prev next nref lref last post

Re: Kerberos through gateway

daemon@ATHENA.MIT.EDU (Sebastian Hanigk)
Tue Mar 4 03:30:14 2008

From: Sebastian Hanigk <hanigk@in.tum.de>
Date: Tue, 04 Mar 2008 09:24:46 +0100
Message-ID: <fqj10d$f5r$1@news.lrz-muenchen.de>
Mime-Version: 1.0
X-Complaints-To: newsmaster@lrz-muenchen.de
Mail-Copies-To: never
To: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

"Casey T. Deccio" <ctdecci@sandia.gov> writes:

> I have a network on which machines do not have direct access outside.
> Instead they are required to go through a particular machine which acts
> as a gateway/proxy for various services.  I'd like to have the inside
> machines request kerberos tickets from this gateway, which will send the
> requests as a proxy.  The only reference to something like this that
> I've been able to find is IAKERB [1], which is apparently Internet-draft
> status, and for which I haven't seen any implementations.
>
> Any ideas?

You could use NAT for Kerberos connections and request addressless
tickets.


Sebastian
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post