[4062] in Kerberos
Re: Delegation in KRB
daemon@ATHENA.MIT.EDU (Jim.Rees@umich.edu)
Wed Oct 19 23:42:16 1994
To: kerberos@MIT.EDU
Date: 19 Oct 1994 21:54:02 GMT
From: Jim.Rees@umich.edu
In article <9410191711.AA05849@toxicwaste.media.mit.edu>, warlord@MIT.EDU (Derek Atkins) writes:
If not, if you are using krb4 code, then
you shouldn't have proxies at all.
The protocol allows you to do proxies in k4, but the application interfaces
aren't there.
It's also possible to simply pass tickets (via an encrypted channel, I would
hope) from one client to another, if your servers allow this. Some do, most
don't.
The PROXIABLE flag in krb5 makes all of this much easier.
