[7954] in Kerberos

home help back first fref pref prev next nref lref last post

Re: Kerberos 5 and S/Key

daemon@ATHENA.MIT.EDU (Michael Stein)
Fri Sep 13 19:19:10 1996

To: kerberos@MIT.EDU
Date: Fri, 13 Sep 1996 14:56:19 GMT
From: mas@ucla.edu (Michael Stein)

nectar@kai.communique.net (Jacques Vidrine) wrote:


>Can a user get a TGT when authenticating via S/Key?  It seems that
>this should be possible, but I imagine that it would require some
>integration between Kerberos 5 and S/Key.

/disclaimer: I'm new to kerberos, I've used S/Key/

What's the point?  My understanding of Kerberos is that anyone can
request  a  TGT from the kerberos security server, but the reply is
going to be encrypted in the users secret key (his password).   

Can you decrypt a TGT in your head?

If not then you are going to have to tell the local machine your
password so that it can decrypt the TGT.

What was the purpose of using S/Key instead?




home help back first fref pref prev next nref lref last post