[19874] in Kerberos_V5_Development
Question about excluding the PAC
daemon@ATHENA.MIT.EDU (Schwartz, John)
Fri Jan 25 16:56:40 2019
From: "Schwartz, John" <John.Schwartz@anthem.com>
To: "krbdev@mit.edu" <krbdev@mit.edu>
Date: Fri, 25 Jan 2019 21:56:28 +0000
Message-ID: <BN6P169MB0034FC9EE08146E2C0D1FE70919B0@BN6P169MB0034.NAMP169.PROD.OUTLOOK.COM>
Content-Language: en-US
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
All, I have a Kerberos 5 implementation running on Linux and is integrated with the web server for website SSO access.
I have a need to exclude the PAC from the request ticket and am looking for the simplest way to do that.
I see that kinit has the option "--no-request-pac"
Is there a similar way to do it from the krb5.conf or does it need a custom shared object?
If it needs a custom shared object, can someone provide sample code? I am not able to tell from the existing documentation what needs to be done.
Any assistance is greatly appreciated.
Thank you,
Anthem, Inc.
John Schwartz, Exec Advisor, Authentication Services
21555 Oxnard St., Woodland Hills, California 91367
O: (818) 234-6763 |
john.schwartz@anthem.com
CONFIDENTIALITY NOTICE: This e-mail message, including any attachments, is
for the sole use of the intended recipient(s) and may contain confidential
and privileged information or may otherwise be protected by law. Any
unauthorized review, use, disclosure or distribution is prohibited. If you
are not the intended recipient, please contact the sender by reply e-mail
and destroy all copies of the original message and any attachment thereto.
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
