Re: [External] : Re: Windows Credential Guard with MSLSA

Seshan Parameswaran <[email protected]> Wed, 6 Sep 2023 16:17:38 +0000
Newsgroups gmane.comp.encryption.kerberos.devel
Message-ID <BYAPR10MB3479DDC2FF102C56220FA65A9DEFA@BYAPR10MB3479.namprd10.prod.outlook.com>
I am running on Oracle Enterprise Linux and using MIT libraries.  I am aware of the AllowTgtSessionKey Registry setting parameter that works when MSLSA is used without the Credential Guard.  My query is specific to MSLSA used with Windows Credential Guard.

From: Sam Hartman <[email protected]>
Date: Wednesday, September 6, 2023 at 6:29 AM
To: Seshan Parameswaran <[email protected]>, [email protected] <[email protected]>
Subject: Re: [External] : Re: Windows Credential Guard with MSLSA
>>>>> "Seshan" == Seshan Parameswaran <[email protected]> writes:

    Seshan> Hi Sam I am trying to revisit the question I asked a year
    Seshan> ago.  Could you please specify if the comments you mentioned
    Seshan> below are specific to Windows Native or is applicable to
    Seshan> both Windows as well as Linux?

Linux doesn't have an MSLSA cache.
If you're running on some version of WSL, then it kind of depends on
your Kerberos implementation.
I do not think that as shipped a Linux build of the MIT sources can
access an MSLSA cache under WSL.
_______________________________________________
krbdev mailing list             [email protected]
https://mailman.mit.edu/mailman/listinfo/krbdev