[37479] in Kerberos
RE: Support for RFC 5178/5179
daemon@ATHENA.MIT.EDU (Osipov, Michael)
Wed Apr 20 04:46:19 2016
From: "Osipov, Michael" <michael.osipov@siemens.com>
To: "Osipov, Michael" <michael.osipov@siemens.com>,
"kerberos@mit.edu"
<kerberos@mit.edu>
Date: Wed, 20 Apr 2016 08:45:53 +0000
Message-ID: <68644224DA0DE64CA5A49838ED219A0425B44204@DEFTHW99EJ5MSX.ww902.siemens.net>
In-Reply-To: <68644224DA0DE64CA5A49838ED219A0425B441DA@DEFTHW99EJ5MSX.ww902.siemens.net>
Content-Language: de-DE
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
> Hi folks,
>
> are there any plans to support RFC 5178 [1], 5179 [2]?
>
> Those domain-based SPNs are very often used in Active Directory,
> especially for LDAP
> services. I have justed kvno(1) for fake TGS requests for this. It works
> to some extent
> but NT_PRINCINAL is provided over the wire and not at least SRV-INST with
> three components.
Sorry, forgot to add the references:
[1] http://www.rfc-editor.org/info/rfc5178
[2] http://www.rfc-editor.org/info/rfc5179
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
