[15727] in Kerberos_V5_Development

home help back first fref pref prev next nref lref last post

Re: preauth (I'm a Roomba in a 2'x2' room)

daemon@ATHENA.MIT.EDU (Sam Hartman)
Thu Apr 29 11:50:38 2010

From: Sam Hartman <hartmans@mit.edu>
To: Jeff Blaine <jblaine@kickflop.net>
Date: Thu, 29 Apr 2010 11:50:28 -0400
In-Reply-To: <4BD7A344.4060801@kickflop.net> (Jeff Blaine's message of "Tue,
	27 Apr 2010 22:53:56 -0400")
Message-ID: <tsl4oiugsvv.fsf@mit.edu>
MIME-Version: 1.0
Cc: "krbdev@mit.edu" <krbdev@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu

patype 0x95 (149) is
#define KRB5_ENCPADATA_REQ_ENC_PA_REP 149
See http://k5wiki.kerberos.org/wiki/Projects/Fast_negotiation
and 0x85 is 
#define KRB5_PADATA_FX_COOKIE 133



MIT 1.8 does support the preauth framework draft, although because it
does not support multi-round-trip preauth mechanisms it does not
actually implement authentication sets.
Well, parts of the code do try to support multi-round-trip stuff, but
overall more work would be needed to make that work.

--Sam
_______________________________________________
krbdev mailing list             krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev

home help back first fref pref prev next nref lref last post