[30130] in Kerberos
Re: SSO
daemon@ATHENA.MIT.EDU (Russ Allbery)
Fri Jul 18 13:03:00 2008
To: kerberos@mit.edu
In-Reply-To: <ofa6l5-70c.ln1@nb2.stroeder.com> ("Michael =?iso-8859-1?Q?St?=
=?iso-8859-1?Q?r=F6der=22's?= message of "Fri\, 18 Jul 2008 13\:13\:28
+0200")
From: Russ Allbery <rra@stanford.edu>
Date: Fri, 18 Jul 2008 10:02:02 -0700
Message-ID: <87hcangm7p.fsf@windlord.stanford.edu>
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Errors-To: kerberos-bounces@mit.edu
Content-Transfer-Encoding: 8bit
Michael Ströder <michael@stroeder.com> writes:
> Is the TGT sent by the browser in the SPNEGO blob? Up to now I thought
> it's just a service ticket.
It's optional. The browser can choose to delegate credentials or not,
based on local configuration. (In Firefox, for example, it's two separate
configuration options.)
--
Russ Allbery (rra@stanford.edu) <http://www.eyrie.org/~eagle/>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
