[37656] in Kerberos

home help back first fref pref prev next nref lref last post

FAST OTP

daemon@ATHENA.MIT.EDU (Machin, Glenn D)
Fri Aug 26 16:27:08 2016

From: "Machin, Glenn D" <GMachin@sandia.gov>
To: "kerberos@mit.edu" <kerberos@mit.edu>
Date: Fri, 26 Aug 2016 20:26:26 +0000
Message-ID: <7C5D7501-D822-4A79-963C-46BFC5EBD2DB@sandia.gov>
Content-Language: en-US
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Errors-To: kerberos-bounces@mit.edu
Content-Transfer-Encoding: 8bit

I was able to configure a krb5-1.14.2 KDC to use FAST OTP with an RSA Authentication Manager Radius server.

I have a couple of questions:


·         FAST requires an existing ticket cache.  If you need a TGT to get a FAST OTP TGT how do you do that?

·         The OTP preauth client is embedded into the libkrb5 library.  Has anyone extracted it as a standalone plugin and used it on an OS whose supported Kerberos library does not include OTP preauth?


Glenn
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos


home help back first fref pref prev next nref lref last post