[37042] in Kerberos
Re: Differentiate the ServiceTicket issued from Kinit vs PKinit
daemon@ATHENA.MIT.EDU (Aravind Jerubandi)
Tue Jun 2 16:45:53 2015
MIME-Version: 1.0
In-Reply-To: <CAFiFpn=RZGwzVphSyn7WtKwhepAYUUQg1AihOn2HaOz4Dc2_uA@mail.gmail.com>
Date: Tue, 2 Jun 2015 11:13:55 -0700
Message-ID: <CAFiFpnnG_=JibFkSshTnjzbo=RST9cT6waAPf=9NMHbPKEjRQg@mail.gmail.com>
From: Aravind Jerubandi <aravind.jerubandi@gmail.com>
To: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Hello,
Could you please answer my query?
On Fri, May 22, 2015 at 11:03 AM, Aravind Jerubandi <
aravind.jerubandi@gmail.com> wrote:
> Hello,
>
> Today we use password based authentication (kinit). And we want to
> introduce PKinit. But while validating ServiceTicket we would like to know
> if the service ticket issued through Kinit to PKinit
>
> Is there a way to find this?
>
> If not, the other solution is to use different realms for Kinit and
> Pkinit. But then we will have duplicate all the user and service principals
> for the two realms. Is there any other easier solution?
>
> Any help would be much appreciated.
>
>
> --
> Thanks,
> Aravind
>
--
Thanks & Regards,
J.Aravind
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
