Freeradius & kerberos preauth
Roy D. Hockett
royboy at umich.edu
Fri Jul 1 17:25:17 CEST 2005
Alan,
In kerberos v4 a client would request a Ticket Granting Ticket
(TGT) from the Kerberos KDC, and the KDC would comply and send it. In
kerberos v5 you can require what is referred to as preauth, and this means
that the KDC doesn return a TGT until the client has authenticated. So
I am asking if anyone have freeradius with the kerberos module working
with a Kerberos KDC that requires preauthentication.
Thanks,
-Roy
/********************************************************************/
/* Roy Hockett * Telephone: (734) 763-7325 */
/* Network Engineer, * FAX: (734) 615-1727 */
/* ITCom, * Internet: royboy at umich.edu */
/* University of Michigan * */
/********************************************************************/
On Fri, 1 Jul 2005, Alan DeKok wrote:
> "Roy D. Hockett" <royboy at umich.edu> wrote:
>> I ahve looked on the web and haven't found anything afirming that
>> freeradius will support or not support preauth with kerberos v5.
>
> "preauth"?
>
> There's an rlm_krb5 module, if that's what you're looking for.
>
> Alan DekOk.
>
>
>
>
More information about the Freeradius-Users
mailing list