[19618] in Kerberos
RE: Maximum AP and AS message sizes
daemon@ATHENA.MIT.EDU (Tim Alsop)
Mon Jul 21 11:35:22 2003
Message-ID: <815D636CDFAAD611A2DA006097AC6157C60B1B@blackanwhitecat.cybersafe.ltd.uk>
From: Tim Alsop <Tim.Alsop@CyberSafe.Ltd.UK>
To: "Naud, Eric" <eric.naud@Terayon.com>, kerberos@mit.edu
Date: Mon, 21 Jul 2003 16:27:11 +0100
MIME-Version: 1.0
Content-Type: text/plain
Errors-To: kerberos-bounces@mit.edu
Eric,
You also need to consider :
i) Whether IP addresses are stored in the tickets. In particular on a multi homed system the number of addresses can be quite large.
ii) Whether the KDC is a Microsoft KDC because PAC data will be stored in tickets.
These, along with PKINIT requirements are the major contributors to large tickets, and hence large request/response packets to/from the KDC.
Cheers, Tim.
-----Original Message-----
From: Naud, Eric [mailto:eric.naud@Terayon.com]
Sent: 21 July 2003 16:23
To: kerberos@mit.edu
Subject: Maximum AP and AS message sizes
Hi All,
Can anyone tell me what the AP and AS message size maximums would be and what factor are to be considered?
I'm using PKINIT so I know my AS request will be rather large due to the certificate.
Thank!
Eric Naud
Software Development Engineer, Ottawa Design Center Imedia Semiconductor
613.592.1052 x232
mailto:eric.naud@imedia.com
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
