[4538] in Kerberos
Re: Interoperability questions regarding the Kerberos GSS-API Mechanism
daemon@ATHENA.MIT.EDU (Marc Horowitz)
Wed Feb 1 14:53:25 1995
To: Danny.Nessett@Eng.Sun.COM (Dan Nessett)
Cc: dpg@ocsg.com, wray@tuxedo.enet.dec.com, cat-ietf@MIT.EDU, kerberos@MIT.EDU
In-Reply-To: Your message of "Wed, 01 Feb 1995 08:14:35 PST."
<199502011614.IAA05770@elrond.ss-eng.eng.sun.com>
Date: Wed, 01 Feb 1995 14:41:52 -0500
From: Marc Horowitz <marc@cam.ov.com>
>> Actually, this is not a GSSAPI problem (as I stated in my previous
>> message), but rather a problem with the underlying
>> mechanism. Consequently, I am copying this message to the kerberos
>> discussion list and would recommend we move any further exploration to
>> that list.
It's split, actually. The issue of replay and ordering for session
establishment (mk_req/rd_req) is a krb5 issue, and best discussed on
the kerberos list. Replay and ordering for per-message gssapi tokens
is done by the gssapi krb5 mechanism, which makes it a gssapi issue
best discussed on the cat-ietf list.
Marc
