[35826] in Kerberos
Re: Request to change MIT Kerberos behavior when principal is
daemon@ATHENA.MIT.EDU (Nico Williams)
Thu Mar 6 12:30:09 2014
MIME-Version: 1.0
In-Reply-To: <4DE25DED585CD840A23808AFDE3DA20601511F1C@RPITSEXMS4.its.uncc.edu>
Date: Thu, 6 Mar 2014 11:29:55 -0600
Message-ID: <CAK3OfOi=RoT4kQqDQZEVUV8b+0iB9QrO-VbiFowMLbGCkq9KRA@mail.gmail.com>
From: Nico Williams <nico@cryptonector.com>
To: "Edgecombe, Jason" <jwedgeco@uncc.edu>
Cc: "kerberos@mit.edu" <kerberos@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
FWIW, Heimdal's TGS already does reject requests for clients whose
principals should exist int he local HDB but don't. (Obviously this
can only be done when the client's realm is also a realm for which the
KDC has a database.)
Nico
--
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
