[38909] in Kerberos
Re: Integration of Duo with MIT Kerberos?
daemon@ATHENA.MIT.EDU (Greg Hudson)
Mon Apr 26 17:58:17 2021
To: Ben Poliakoff <benp@reed.edu>, <kerberos@mit.edu>
From: Greg Hudson <ghudson@mit.edu>
Message-ID: <53706e5a-3de3-84a8-24bc-b931f0f0593c@mit.edu>
Date: Mon, 26 Apr 2021 17:55:24 -0400
MIME-Version: 1.0
In-Reply-To: <CAEamvFBfFkbFcXDdgLOgJM5hjfoYtwQNG=uDHHs0RDU_fDUfng@mail.gmail.com>
Content-Language: en-US
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On 4/26/21 2:36 PM, Ben Poliakoff wrote:
> On that thread there was some talk about MIT's implementation, possible
> eventual open sourcing of said implementation and/or creating a
> newer/cleaner implementation using SPAKE-2.
>
> Did anything ever come if this? We'd certainly love to be able to
> selectively integrate second factors such as Duo with our MIT krb5 KDCs.
Unfortunately no. The MIT implementation isn't in a releasable state,
and we haven't made any significant progress on implementing second
factors in SPAKE.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
