Michael van Dijk <[email protected]> writes: > Now for the possible 'misbehaviour'
> Repeating the same actions (making an SSH connection from kerberized SSH > client to kerberized SSH server) from 'Linux Slackware client A' to > 'Linux Slackware SSH server A' generates a TGS_REQ for > krbtgt/re...@realm every time a new SSH connection is initiated to > 'Linux Slackware SSH server A'. The same goes for SSH Putty connections > from 'Windows XP client A' to 'Linux Slackware SSH server A'. Every new > SSH connection generates another TGS_REQ for krbtgt/re...@realm. > Can anybody explain me this behaviour ? Is it expected ? It's probably because the client supports ticket forwarding. I suspect the additional TGS-REQ is to obtain the krbtgt/REALM ticket that will be forwarded to the remote host. -- Russ Allbery ([email protected]) <http://www.eyrie.org/~eagle/> ________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos
