Jeffrey Altman wrote:
Adam Megacz wrote:
Hey, thanks for the great explanation!
Many organizations using either gssklogd or versions of krb524d or even
krb525d perform client identity name translation from the name known to
Okay, one more question... what is krb525d? I know what krb524d is...
http://www.google.com/search?q=krb525d
- a
krb525d is a service that takes as input a Kerberos 5 ticket and
returns a different Kerberos 5 ticket perhaps with a different user
principal name, perhaps with different ticket lifetimes. It is
not a service that anyone distributes publicly.
Wouldn't mind having the source for one, this could come in handy in
some nasty proxy-'d authentication stuff...
-rob
_______________________________________________
OpenAFS-devel mailing list
[email protected]
https://lists.openafs.org/mailman/listinfo/openafs-devel
