Split IAKERB for local KDCs cross-realm setup?
Alexander Bokovoy via krbdev <[email protected]> Thu, 27 Mar 2025 10:52:36 +0200
| Newsgroups | gmane.comp.encryption.kerberos.devel |
|---|---|
| Message-ID | <[email protected]> |
SGksCgpub3cgdGhhdCB3ZSd2ZSBnb3QgSUFLRVJCIHByb3RvY29sIHJlbW90ZSByZWFsbSBkaXNj b3ZlcnkgaW1wbGVtZW50ZWRbMV0KYW5kIGZpeGVkWzJdIHNob3J0Y3V0cyB3aGVyZSBJQUtFUkIg ZXhjaGFuZ2VzIHNraXAgQVMtUkVRLCBnb2luZyB0byBUR1MtUkVRCm9yIGV2ZW4gZGlyZWN0bHkg dG8gQVAtUkVRLCBvbmUgcmVtYWluaW5nIGJpdCBvZiBvdXIgbG9jYWwgS0RDIHdvcmsgaXMKdG8g YmUgYWJsZSB0byBlc3RhYmxpc2ggY3Jvc3MtcmVhbG0gcmVsYXRpb25zaGlwIGJldHdlZW4gdHdv IGxvY2FsIEtEQ3MKYW5kIGFsbG93IHVzZXJzIHRvIG9idGFpbiB0aGVpciBpbml0aWFsIFRHVCBs b2NhbGx5IHdoaWxlIHJlcXVlc3RpbmcgdGhlCnNlcnZpY2UgdGlja2V0IG92ZXIgdGhlIGNyb3Nz LXJlYWxtLgoKUmlnaHQgbm93IHRoaXMgZG9lcyBub3Qgd29yayBiZWNhdXNlIElBS0VSQiBtZWNo YW5pc20gaW1wbGVtZW50YXRpb24gaXMKYSB0cnVlIHByb3h5OiB3aGF0ZXZlciBLZXJiZXJvcyBw YXlsb2FkIGlzIHByb2R1Y2VkIGJ5IHRoZSBJQUtFUkIgY2xpZW50CnNpZGUgbWVjaCwgZ2V0cyB0 cmFuc3BvcnRlZCBvdmVyIHRoZSBhcHBsaWNhdGlvbiBwcm90b2NvbCB0byB0aGUgc2VydmVyCnNp ZGUgYW5kIHRoZXJlIElBS0VSQiBzZXJ2ZXIgc2lkZSBtZWNoIHdpbGwgcHJvY2VzcyBpdC4gQXMg YSByZXN1bHQsCklBS0VSQiBzZXJ2ZXIgc2lkZSBtZWNoIHdvdWxkIGhhbmRsZSBhIFRHUy1SRVEg d2hlcmUgYW4gaW5pdGlhbCB0aWNrZXQKcHJlc2VudGVkIGJ5IHRoZSBjbGllbnQgaXMgdGhlIG9u ZSBpc3N1ZWQgYnkgdGhlIEtEQyBvbiB0aGUgY2xpZW50IHNpZGUuCk9idmlvdXNseSwgc2VydmVy IHNpZGUgSUFLRVJCIGltcGxlbWVudGF0aW9uIGhhcyBubyBhY2Nlc3MgdG8gdGhhdCBLREMuCgog RnJvbSBteSBjb21tZW50IGluIHRoZSBQUiMxNDE1OgotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQpJbiB0aGUgbmV0 d29yayB0cmFjZSBiZWxvdyAuMjIxLjIgaXMgdGhlIGNsaWVudCwgLjIyMS4zIGlzIHRoZSBzZXJ2 ZXIuClRoZSBzZXJ2ZXIgYXR0ZW1wdHMgdG8gbG9va3VwIGNsaWVudCdzIHJlYWxtIHRocm91Z2gg YSBsb2NhdG9yIHBsdWdpbgpvdmVyIEROUywgZmFpbHMgYW5kIHNlbmRzIGEgZmFpbHVyZToKCiQg dHNoYXJrIC1yIH4vRG93bmxvYWRzL2lha2VyYi10d28tcmVhbG1zLnRjcCAKICAgICAxICAgMC4w MDAwMDAgMTkyLjE2OC4yMjEuMiDihpIgMTkyLjE2OC4yMjEuMyBUQ1AgNzQgNTEzMzYg4oaSIDQ0 NSBbU1lOXSBTZXE9MCBXaW49NjQyNDAgTGVuPTAgTVNTPTE0NjAgU0FDS19QRVJNIFRTdmFsPTMw MDEwNjE5ODQgVFNlY3I9MCBXUz0xMjgKICAgICAyICAgMC4wMDAwMTggMTkyLjE2OC4yMjEuMyDi hpIgMTkyLjE2OC4yMjEuMiBUQ1AgNzQgNDQ1IOKGkiA1MTMzNiBbU1lOLCBBQ0tdIFNlcT0wIEFj az0xIFdpbj02NTE2MCBMZW49MCBNU1M9MTQ2MCBTQUNLX1BFUk0gVFN2YWw9MzUyMTU4MjU3OSBU U2Vjcj0zMDAxMDYxOTg0IFdTPTEyOAogICAgIDMgICAwLjAwMDAyNiAxOTIuMTY4LjIyMS4yIOKG kiAxOTIuMTY4LjIyMS4zIFRDUCA2NiA1MTMzNiDihpIgNDQ1IFtBQ0tdIFNlcT0xIEFjaz0xIFdp bj02NDI1NiBMZW49MCBUU3ZhbD0zMDAxMDYxOTg0IFRTZWNyPTM1MjE1ODI1NzkKICAgICA0ICAg MC4wMDAxNDQgMTkyLjE2OC4yMjEuMiDihpIgMTkyLjE2OC4yMjEuMyBTTUIyIDM0MiBOZWdvdGlh dGUgUHJvdG9jb2wgUmVxdWVzdAogICAgIDUgICAwLjAwMDE1MCAxOTIuMTY4LjIyMS4zIOKGkiAx OTIuMTY4LjIyMS4yIFRDUCA2NiA0NDUg4oaSIDUxMzM2IFtBQ0tdIFNlcT0xIEFjaz0yNzcgV2lu PTY0ODk2IExlbj0wIFRTdmFsPTM1MjE1ODI1NzkgVFNlY3I9MzAwMTA2MTk4NAogICAgIDYgICAw LjAwNDIxMiAxOTIuMTY4LjIyMS4zIOKGkiAxOTIuMTY4LjIyMS4yIFNNQjIgMzc4IE5lZ290aWF0 ZSBQcm90b2NvbCBSZXNwb25zZQogICAgIDcgICAwLjAwNDIzMyAxOTIuMTY4LjIyMS4yIOKGkiAx OTIuMTY4LjIyMS4zIFRDUCA2NiA1MTMzNiDihpIgNDQ1IFtBQ0tdIFNlcT0yNzcgQWNrPTMxMyBX aW49NjQxMjggTGVuPTAgVFN2YWw9MzAwMTA2MTk4OCBUU2Vjcj0zNTIxNTgyNTgzCiAgICAgOCAg IDAuMDEwMjE4IDE5Mi4xNjguMjIxLjIg4oaSIDE5Mi4xNjguMjIxLjMgU01CMiAxNDIzIFNlc3Np b24gU2V0dXAgUmVxdWVzdAogICAgIDkgICAwLjAxMjc1NiAxOTIuMTY4LjIyMS4zIOKGkiAxOTIu MTY4LjIyMS4xIEROUyA4NiBTdGFuZGFyZCBxdWVyeSAweDIwNjggVVJJIF9rZXJiZXJvcy5BQi5M T0NBTEtEQy5TSVRFCiAgICAxMCAgIDAuMDE0MDI2IDE5Mi4xNjguMjIxLjEg4oaSIDE5Mi4xNjgu MjIxLjMgRE5TIDE1MSBTdGFuZGFyZCBxdWVyeSByZXNwb25zZSAweDIwNjggTm8gc3VjaCBuYW1l IFVSSSBfa2VyYmVyb3MuQUIuTE9DQUxLREMuU0lURSBTT0EgbnMwLmNlbnRyYWxuaWMubmV0CiAg ICAxMSAgIDAuMDE0MTYzIDE5Mi4xNjguMjIxLjMg4oaSIDE5Mi4xNjguMjIxLjEgRE5TIDkxIFN0 YW5kYXJkIHF1ZXJ5IDB4YTgwNSBTUlYgX2tlcmJlcm9zLl91ZHAuQUIuTE9DQUxLREMuU0lURQog ICAgMTIgICAwLjAxNDU0OCAxOTIuMTY4LjIyMS4xIOKGkiAxOTIuMTY4LjIyMS4zIEROUyAxNTYg U3RhbmRhcmQgcXVlcnkgcmVzcG9uc2UgMHhhODA1IE5vIHN1Y2ggbmFtZSBTUlYgX2tlcmJlcm9z Ll91ZHAuQUIuTE9DQUxLREMuU0lURSBTT0EgbnMwLmNlbnRyYWxuaWMubmV0CiAgICAxMyAgIDAu MDE0NTk5IDE5Mi4xNjguMjIxLjMg4oaSIDE5Mi4xNjguMjIxLjEgRE5TIDkxIFN0YW5kYXJkIHF1 ZXJ5IDB4M2Y3YSBTUlYgX2tlcmJlcm9zLl90Y3AuQUIuTE9DQUxLREMuU0lURQogICAgMTQgICAw LjAxNDg4MyAxOTIuMTY4LjIyMS4xIOKGkiAxOTIuMTY4LjIyMS4zIEROUyAxNTYgU3RhbmRhcmQg cXVlcnkgcmVzcG9uc2UgMHgzZjdhIE5vIHN1Y2ggbmFtZSBTUlYgX2tlcmJlcm9zLl90Y3AuQUIu TE9DQUxLREMuU0lURSBTT0EgbnMwLmNlbnRyYWxuaWMubmV0CiAgICAxNSAgIDAuMDE1MTM4IDE5 Mi4xNjguMjIxLjMg4oaSIDE5Mi4xNjguMjIxLjIgU01CMiAxNDMgU2Vzc2lvbiBTZXR1cCBSZXNw b25zZSwgRXJyb3I6IFNUQVRVU19MT0dPTl9GQUlMVVJFCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tCgpJQUtFUkIg YWxyZWFkeSBhbGxvd3MgZm9yIHRoZSBhY2NlcHRvciB0byByZXNwb25kIHdpdGgKS1JCX0FQX0VS Ul9JQUtFUkJfS0RDX05PVF9GT1VORCBpbiBjYXNlIHRoZSBLREMgd2FzIG5vdCBmb3VuZCwgc28g bWF5IGJlCndoYXQgd2UgbWlzcyBpcyBhIGNoZWNrIGluIHRoZSBJQUtFUkIgaW5pdGlhdG9yIGNv ZGUgdG8gc2VlIGlmIHRoYXQgS0RDCmlzIGFjdHVhbGx5IG91ciBvd24uIFRoZW4gd2UgY2FuIHBl cmZvcm0gbG9jYWwgb3BlcmF0aW9uIGluIHRoZSBob3BlIHRvCm9idGFpbiBhIGNyb3NzLXJlYWxt IHJlZmVycmFsLgoKQW5vdGhlciBwb3NzaWJsZSB3YXkgdG8gc29sdmUgdGhpcyBpcyB0byByZWNv Z25pemUgdGhhdCB0aGUgd2UgaGF2ZSBhCmxvY2FsIGNsaWVudCdzIHJlYWxtIGNyZWRzIGFscmVh ZHkgYW5kIG5vIG5vdGlvbiBhYm91dCB0aGUgc2VydmVyIHJlYWxtCnlldC4gIFBlcmZvcm0gYSBy ZW1vdGUgcmVhbG0gZGlzY292ZXJ5IGFuZCB0aGVuLCBpZiB0aGUgbG9jYWwgYW5kIHRoZQpyZW1v dGUgcmVhbG1zIGFyZSBkaWZmZXJlbnQsIGF0dGVtcHQgYSBsb2NhbCBUR1MtUkVRIHRvIHNlZSBp ZiBhCmNyb3NzLXJlYWxtIHJlZmVycmFsIGNvdWxkIGJlIG9idGFpbmVkLiBJZiB0aGF0J3MgcG9z c2libGUsIGNvbnRpbnVlCndpdGggdGhpcyByZWZlcnJhbCB0byB0aGUgc2VydmVyIHNpZGUgSUFL RVJCLgoKWzFdIGh0dHBzOi8vZ2l0aHViLmNvbS9rcmI1L2tyYjUvcHVsbC8xNDE1ClsyXSBodHRw czovL2dpdGh1Yi5jb20va3JiNS9rcmI1L3B1bGwvMTQxNgoKLS0gCi8gQWxleGFuZGVyIEJva292 b3kKU3IuIFByaW5jaXBhbCBTb2Z0d2FyZSBFbmdpbmVlcgpTZWN1cml0eSAvIElkZW50aXR5IE1h bmFnZW1lbnQgRW5naW5lZXJpbmcKUmVkIEhhdCBMaW1pdGVkLCBGaW5sYW5kCgpfX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwprcmJkZXYgbWFpbGluZyBsaXN0 ICAgICAgICAgICAgIGtyYmRldkBtaXQuZWR1Cmh0dHBzOi8vbWFpbG1hbi5taXQuZWR1L21haWxt YW4vbGlzdGluZm8va3JiZGV2Cg==