>>>>> "Wood," == Wood, Justin S <[EMAIL PROTECTED]> writes:
    Wood,> Perhaps I've missed the point, but should it not be
    Wood,> possible to configure the client to always send preauth,
    Wood,> and hence remove the initial redundant protocol
    Wood,> interaction?

I believe that current APIs allow this, but kinit does not currently
implement that feature.

In future, it will be less useful as the client will need more
information from the KDC to make a correct guess about what preauth or
encryption types to use.

So you should not expect to see anyone actually exposing this support
in kinit.

________________________________________________
Kerberos mailing list           [EMAIL PROTECTED]
https://mailman.mit.edu/mailman/listinfo/kerberos

Reply via email to