[33713] in Kerberos
Re: (mk|rd)_(priv|safe) and NAT
daemon@ATHENA.MIT.EDU (Greg Hudson)
Wed Aug 3 17:39:07 2011
From: Greg Hudson <ghudson@mit.edu>
To: Chris Hecker <checker@d6.com>
In-Reply-To: <4E39B5FA.4060401@d6.com>
Date: Wed, 03 Aug 2011 17:39:01 -0400
Message-ID: <1312407541.23877.300.camel@t410>
Mime-Version: 1.0
Cc: "kerberos@mit.edu" <kerberos@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On Wed, 2011-08-03 at 16:56 -0400, Chris Hecker wrote:
> This brings up the question of what to do in unordered/unreliable
> situations? I have a UDP stream between clients that's a mix of
> ordered/reliable "pseudo-tcp" messages and unordered/unreliable
> messages. My original plan was to use the pseudo-tcp messages to
> negotiate the u2u auth_contexts, but I also want to be able to
> mk_safe/mk_priv on the unreliable messages. Do I need two auth_contexts
> in that case, one without do-sequence set?
By default, an auth context will use a replay cache to prevent replays
(this is controlled by the do-time flag).
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
