[33750] in Kerberos
Re: client side password store best practices?
daemon@ATHENA.MIT.EDU (Greg Hudson)
Tue Aug 9 19:20:54 2011
From: Greg Hudson <ghudson@mit.edu>
To: Chris Hecker <checker@d6.com>
In-Reply-To: <4E41BD21.8080402@d6.com>
Date: Tue, 09 Aug 2011 19:20:28 -0400
Message-ID: <1312932028.16540.8.camel@t410>
Mime-Version: 1.0
Cc: "kerberos@mit.edu" <kerberos@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On Tue, 2011-08-09 at 19:05 -0400, Chris Hecker wrote:
> However, I've hit a snag: when creating a keytab on the client using
> the code from ktutil as a reference, how do I know what kvno to use?
If you're only using the keytab with krb5_get_init_creds_keytab, then it
doesn't matter if you get the kvno right. The client code will use the
keytab entry with the most recent kvno, since the KDC doesn't mention
the kvno during an AS exchange.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
