[20374] in Kerberos_V5_Development

home help back first fref pref prev next nref lref last post

Re: Windows Credential Guard with MSLSA

daemon@ATHENA.MIT.EDU (Sam Hartman)
Fri Jun 24 10:56:22 2022

From: Sam Hartman <hartmans@debian.org>
To: Seshan Parameswaran <seshan.parameswaran@oracle.com>,
        "krbdev@mit.edu"
 <krbdev@mit.edu>
In-Reply-To: <BYAPR10MB3479CCA660F2981FA559A2489DB59@BYAPR10MB3479.namprd10.prod.outlook.com>
Date: Fri, 24 Jun 2022 14:55:00 +0000
Message-ID: <0100018196358cab-fe0f74a3-7e55-4981-9ddc-a690081e82d0-000000@email.amazonses.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu


It used to be the case that the MSLSA cache would work reasonably well
without TGT keys available.
Namely, if you retrieved a ticket the cache would ask the LSA to get the
ticket for you,.
Does this no longer work?
If this does work, does it meet your needs?
If not, what functionality are you missing?
_______________________________________________
krbdev mailing list             krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev

home help back first fref pref prev next nref lref last post