Saber Zrelli wrote: > I was referring to a KDC instead of an IAKERB proxy. My thoughts are > that these proxying functionalities should be moved to the KDC of > the visited realm. But this would be another topic that I wish to > start soon.
Why would you want to have the KDC from one realm act as a proxy to other realms? You already have a proxy that will be communicating with the KDC from the local realm. Why wouldn't that proxy act like a normal Kerberos client and communicate with each of the realms necessary to obtain service tickets for the source client? Jeffrey Altman ________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos
