[35743] in Kerberos
Kind of Tickets Granting Control List
daemon@ATHENA.MIT.EDU (Damien Touraine)
Tue Feb 4 23:39:52 2014
Message-ID: <52F1C086.1060509@limsi.fr>
Date: Wed, 05 Feb 2014 05:39:34 +0100
From: Damien Touraine <damien.touraine@limsi.fr>
MIME-Version: 1.0
To: kerberos@mit.edu
Content-Type: multipart/mixed; boundary="===============0463853052=="
Errors-To: kerberos-bounces@mit.edu
This is a cryptographically signed message in MIME format.
--===============0463853052==
Content-Type: multipart/signed; protocol="application/pkcs7-signature";
micalg=sha1; boundary="------------ms050509090304040801010502"
This is a cryptographically signed message in MIME format.
--------------ms050509090304040801010502
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: quoted-printable
Hi,
I am looking for a method to filter ticket granting.
For instance, I have two NFS servers (nfs/server1@REALM and=20
nfs/server2@REALM) and one computer client (nfs/client@REALM).
I want kerberos to grant nfs/client@REALM for nfs/server1@REALM, but=20
forbid nfs/client@REALM for nfs/server2@REALM.
Is it possible ?
My configuration : MIT kerberos 1.10 standard package of Ubuntu precise=20
(12.04). We use LDAP DB.
Regards,
Damien Touraine
--=20
--------------------------------------------------------------------
Damien TOURAINE - Research Engineer, CNRS, LIMSI-CNRS
VR&A groupe "VENISE", (http://www.limsi.fr/venise/)
Bat. 508, Universite Paris-Sud 91403 Orsay cedex - +33 1 69 85 81 64
--------------------------------------------------------------------
--------------ms050509090304040801010502--
--===============0463853052==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
--===============0463853052==--
