[24313] in Kerberos

home help back first fref pref prev next nref lref last post

Re: EAP-Kerberos

daemon@ATHENA.MIT.EDU (Sam Hartman)
Sun Jul 17 21:57:37 2005

To: Saber Zrelli <zrelli@jaist.ac.jp>
From: Sam Hartman <hartmans-ietf@mit.edu>
Date: Sun, 17 Jul 2005 21:55:12 -0400
In-Reply-To: <20050717160153.GB16863@mlserv.jaist.ac.jp> (Saber Zrelli's
 message of "Mon, 18 Jul 2005 01:01:53 +0900")
Message-ID: <tslr7dwyj27.fsf@cz.mit.edu>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
cc: kerberos@mit.edu
cc: cmh@netsteady.cc
Errors-To: kerberos-bounces@mit.edu

>>>>> "Saber" == Saber Zrelli <zrelli@jaist.ac.jp> writes:

    Saber> when some visiting user would like to connect to a foreign
    Saber> wireless network, In addition to the bootstrapping problem,
    Saber> the actual protocol defined by IAKERB does not allow the
    Saber> operator to authenticate the visiting user since he/she is
    Saber> not registered in the local DB. Hence there is need to
    Saber> extend the proxy properties to perform inter-realm
    Saber> operations (to communicate with the user's home realm ) for
    Saber> authenticating roaming users.

For the record, I strongly disagree with the above.

I don't have time to explain now, but will try to get to it reasonably soon.
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post