[15695] in Kerberos_V5_Development
Re: preauth code questions
daemon@ATHENA.MIT.EDU (Luke Howard)
Thu Apr 22 02:46:18 2010
Mime-Version: 1.0 (Apple Message framework v1078)
From: Luke Howard <lukeh@padl.com>
In-Reply-To: <4BCF289E.8050800@kickflop.net>
Date: Thu, 22 Apr 2010 16:45:55 +1000
Message-Id: <7379EEF7-3359-47F5-8596-D4C2BEF1AEE6@padl.com>
To: Jeff Blaine <jblaine@kickflop.net>
Cc: "krbdev@mit.edu" <krbdev@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
On 22/04/2010, at 2:32 AM, Jeff Blaine wrote:
>>> * Is the client's IP address available in a preauth plugin?
>>
>> It doesn't look like it.
>
> My KDC preauth plugin wants to connect back to a service on
> the client host.
>
> So I guess I'm screwed as far as making this a KDC-side-only
> plugin?
How about tunnelling the data in the KDC reply and having the client send to the client-side service?
-- Luke
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
