[15530] in Kerberos_V5_Development
Re: krb5-1.8-beta1 is available
daemon@ATHENA.MIT.EDU (Luke Howard)
Thu Feb 25 04:09:49 2010
Mime-Version: 1.0 (Apple Message framework v1077)
From: Luke Howard <lukeh@padl.com>
In-Reply-To: <E1NkYUW-0000Te-Vk@bruson.ifs.umich.edu>
Date: Thu, 25 Feb 2010 09:09:25 +0000
Message-Id: <ED360D1C-441F-48E0-A03F-03C4410CD3C6@padl.com>
To: Marcus Watts <mdw@umich.edu>
Cc: krbdev@mit.edu, Tom Yu <tlyu@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
Marcus,
> So the main concern I have at this point is it's not clear to me whatever
> this is has good documentation, &etc. I'm now more or less convinced
> that S4U2Self and S4U2Proxy aren't ietf draft standards, but at least
> I found http://k5wiki.kerberos.org/wiki/Projects/Services4User .
S4U is documented in [MS-SFU].
KRB5SignedPath is documented at:
http://k5wiki.kerberos.org/wiki/Projects/ConstrainedDelegation
This is an extension for using S4U2Proxy without the MS PAC.
-- Luke
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev