Mark Sirota <[email protected]> writes:
> ----- "Russ Allbery" <[email protected]> wrote:

>> I'm intrigued by the *huge* margin between the number of initial
>> authentications and the number of service tickets issued.  This appears
>> to be due to a couple of factors: ...

> Could also be from applications that are attempting to do password
> verification by getting a TGT and then failing to complete the process
> by trying to use it for something.  I know we found one popular Java
> library that does that.

Yeah, I'm wondering if Zimbra fails to actually verify the user's
credentials against a local keytab.  That would certainly explain a lot of
these, from people using mail clients that are doing password over TLS.

-- 
Russ Allbery ([email protected])             <http://www.eyrie.org/~eagle/>
________________________________________________
Kerberos mailing list           [email protected]
https://mailman.mit.edu/mailman/listinfo/kerberos

Reply via email to