Re: Session Key through GSS-API

Nico Williams <[email protected]> Tue, 28 Feb 2023 14:02:37 -0600
Newsgroups gmane.comp.encryption.kerberos.devel
Message-ID <Y/[email protected]>
On Tue, Feb 28, 2023 at 05:37:59PM +0000, Stephen Brown via krbdev wrote:
> So, the application is an odbc driver which implements the oracle
> database wire-protocol (which unfortunately is not publicly
> documented). We  have found that the session key is needed for cypher
> reinitialization at connect time when using kerberos authentication
> and "oracle advanced security" is enabled on the server. If we use the
> subkey the server is immediately killing the connection. But with the
> session key we're able to connect.

Wait, so Oracle uses the _ticket_'s session key as the session key for
its security layer??

Nico
-- 
_______________________________________________
krbdev mailing list             [email protected]
https://mailman.mit.edu/mailman/listinfo/krbdev