[38801] in Kerberos

home help back first fref pref prev next nref lref last post

Re: Kerberos Database Sync with Sub-Domains

daemon@ATHENA.MIT.EDU (Isaac Boukris)
Tue Jul 14 10:05:09 2020

MIME-Version: 1.0
In-Reply-To: <MN2PR15MB30719AB616C2C738E5E8FDBAB9610@MN2PR15MB3071.namprd15.prod.outlook.com>
From: Isaac Boukris <iboukris@gmail.com>
Date: Tue, 14 Jul 2020 16:01:44 +0200
Message-ID: <CAC-fF8Tw9Y1uyNJdUM3-G1VhMvPdE11TBChBizfZgJXmU1mTLg@mail.gmail.com>
To: Jonathan Towles <jjtowles@synterex.com>
Cc: "kerberos@mit.edu" <kerberos@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

On Tue, Jul 14, 2020 at 3:55 PM Jonathan Towles <jjtowles@synterex.com> wrote:
>
> I got it to work if I reference the UPN in the command.
>
> The application is doing AS-Requests.

Note that S4U2Self would also use AS-REQ for the client-referrals step
(when enterprise names are used), and then switch to TGS-REQ for the
actual S4U2Self request.
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post