Re: Session Key through GSS-API
Nico Williams <[email protected]> Tue, 28 Feb 2023 14:02:37 -0600
| Newsgroups | gmane.comp.encryption.kerberos.devel |
|---|---|
| Message-ID | <Y/[email protected]> |
On Tue, Feb 28, 2023 at 05:37:59PM +0000, Stephen Brown via krbdev wrote: > So, the application is an odbc driver which implements the oracle > database wire-protocol (which unfortunately is not publicly > documented). We have found that the session key is needed for cypher > reinitialization at connect time when using kerberos authentication > and "oracle advanced security" is enabled on the server. If we use the > subkey the server is immediately killing the connection. But with the > session key we're able to connect. Wait, so Oracle uses the _ticket_'s session key as the session key for its security layer?? Nico -- _______________________________________________ krbdev mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/krbdev