[29412] in Kerberos
Re: Kerberos through gateway
daemon@ATHENA.MIT.EDU (Sebastian Hanigk)
Tue Mar 4 03:30:14 2008
From: Sebastian Hanigk <hanigk@in.tum.de>
Date: Tue, 04 Mar 2008 09:24:46 +0100
Message-ID: <fqj10d$f5r$1@news.lrz-muenchen.de>
Mime-Version: 1.0
X-Complaints-To: newsmaster@lrz-muenchen.de
Mail-Copies-To: never
To: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
"Casey T. Deccio" <ctdecci@sandia.gov> writes:
> I have a network on which machines do not have direct access outside.
> Instead they are required to go through a particular machine which acts
> as a gateway/proxy for various services. I'd like to have the inside
> machines request kerberos tickets from this gateway, which will send the
> requests as a proxy. The only reference to something like this that
> I've been able to find is IAKERB [1], which is apparently Internet-draft
> status, and for which I haven't seen any implementations.
>
> Any ideas?
You could use NAT for Kerberos connections and request addressless
tickets.
Sebastian
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos