Freeradius & kerberos preauth

Roy D. Hockett royboy at umich.edu
Fri Jul 1 17:25:17 CEST 2005


Alan,
 	In kerberos v4 a client would request a Ticket Granting Ticket 
(TGT) from the Kerberos KDC, and the KDC would comply and send it.  In 
kerberos v5 you can require what is referred to as preauth, and this means 
that the KDC doesn return a TGT until the client has authenticated.  So
I am asking if anyone have freeradius with the kerberos module working 
with a Kerberos KDC that requires preauthentication.

Thanks,
-Roy

/********************************************************************/
/* Roy Hockett                     *   Telephone: (734) 763-7325    */
/* Network Engineer,               *         FAX: (734) 615-1727    */
/* ITCom,                          *    Internet: royboy at umich.edu  */
/* University of Michigan          *                                */
/********************************************************************/

On Fri, 1 Jul 2005, Alan DeKok wrote:

> "Roy D. Hockett" <royboy at umich.edu> wrote:
>> I ahve looked on the web and haven't found anything afirming that
>> freeradius will support or not support preauth with kerberos v5.
>
>  "preauth"?
>
>  There's an rlm_krb5 module, if that's what you're looking for.
>
>  Alan DekOk.
>
>
>
>



More information about the Freeradius-Users mailing list