Re: Split IAKERB for local KDCs cross-realm setup?
Alexander Bokovoy via krbdev <[email protected]> Fri, 28 Mar 2025 20:55:43 +0200
| Newsgroups | gmane.comp.encryption.kerberos.devel |
|---|---|
| Message-ID | <[email protected]> |
T24g0J/Rj9GCLCAyOCDRgdCw0LogMjAyNSwgTmljbyBXaWxsaWFtcyB3cm90ZToKPk9uIEZyaSwg TWFyIDI4LCAyMDI1IGF0IDExOjQ5OjA5QU0gLTA0MDAsIEdyZWcgSHVkc29uIHdyb3RlOgo+PiBE byB3ZSBleHBlY3QgYSBsb2NhbCBvcGVyYXRpb24gdG8gc3VjY2VlZCBpbiB0aGlzIHVzZSBjYXNl PyAgVGhhdCBpcywKPj4gWy4uLl0KPgo+UG9zc2libHkuICBUaGUgaW5pdGlhdG9yIG1pZ2h0IG9u bHkgaGF2ZSB4LXJlYWxtIFRHVHMgZm9yIGFsbG93ZWQKPmRlc3RpbmF0aW9ucy4gIFRoZSBpbml0 aWF0b3IgbWlnaHQgaGF2ZSBhIFRHVCBmb3Igc29tZSByZWFsbSB3aG9zZSBLRENzCj5pdCBjYW4g cmVhY2gsIGJ1dCBjYW4ndCByZWFjaCB0aGUgZGVzdGluYXRpb24ncyB3aGlsZSB0aGUgZGVzdGlu YXRpb24KPmNhbid0IHJlYWNoIHRoZSBpbml0aWF0b3IncyBUR1QncyByZWFsbSdzIEtEQ3MuCj4K PkNvbnNpZGVyIGEgY2FzZSBvZiB0cmF2ZXJzaW5nIGZyb20gImluc2lkZSIgdG8gInRoZSBETVoi IG9yIHNpbWlsYXIKPndoZXJlIHlvdSBoYXZlIGEgc2VwYXJhdGUgcmVhbG0gZm9yIHRoYXQgZGVz dGluYXRpb24uICBZb3UgbWlnaHQgaGF2ZQo+YWNjZXNzIHRvIHRoZSAiaW5zaWRlIHJlYWxtJ3Mg S0RDcyIgYW5kIG5vdCAidGhlIERNWiByZWFsbSdzIEtEQ3MiLgo+Cj5PciBjb25zaWRlciBhIG1v YmlsZSBkZXZpY2UgdGhhdCBjYW4gYmUgImluc2lkZSIgdmlhIFZQTiBvciAib3V0c2lkZSIKPndo ZW4gdGhlIFZQTiBpcyBkb3duLCBhbmQgd2hlbiAib3V0c2lkZSIgaXQgY2FuIG9ubHkgcmVhY2gg c29tZSByZWFsbXMnCj5LRENzIHZpYSBJQUtFUkIgYW5kIHdoZW4gImluc2lkZSIgaXQgY2FuJ3Qg cmVhY2ggYSBkaWZmZXJlbnQgc2V0IG9mCj5yZWFsbXMnIEtEQ3MuICBUaGUgbW9iaWxlIGRldmlj ZSBjYXNlIGlzIG5vdCB0b28gb3V0bGFuZGlzaC4KClllcywgdGhlc2UgYWxsIHNvdW5kIGxpa2Ug cmVhc29uYWJsZSBzY2VuYXJpb3MuIFNvbWUgb2YgdGhhdCBpbmZvcm1hdGlvbgptYXkgYmUgZGlz Y292ZXJlZCBpbXBsaWNpdGx5IChiYXNlZCBvbiBhIHByZS1jb25maWd1cmVkIHRyYW5zcG9ydCBs aWtlIFVOSVgKZG9tYWluIHNvY2tldCksIGFuZCBzb21lIG9mIGl0IG1pZ2h0IGJlIGV4cGxpY2l0 bHkgY29uZmlndXJlZCBieQpleHRlcm5hbCBzb2Z0d2FyZS4gRm9yIGV4YW1wbGUsIGJvdGggU2Ft YmEgYW5kIFNTU0QgZG8gcGluIEtEQ3MgdG8gdGhlCm9uZXMgY3VycmVudGx5IGNob3NlbiBieSB3 aW5iaW5kZCBhbmQgU1NTRCBmb3IgY29tbXVuaWNhdGlvbiwgdG8KcHJlc2VydmUgc2l0ZS1hd2Fy ZSBjb21tdW5pY2F0aW9uLCBieSBjcmVhdGluZyBjYWNoZSBmaWxlcyBwaWNrZWQgdXAgYnkKdGhl IGNvcnJlc3BvbmRpbmcgbG9jYXRvciBwbHVnaW5zLiBTbyBpdCBpcyBhbHJlYWR5IGluIHBsYWNl LCBhdCBhCmhpZ2hlciAoYXBwbGljYXRpb24pIGxldmVsLgoKPgo+PiBPbmUgY29uY2VybiBpcyB0 aGF0IElBS0VSQiB3YXMgb3JpZ2luYWxseSBkZXNpZ25lZCBmb3IgaW5pdGlhdG9ycyB3aXRoIHZl cnkKPj4gbGltaXRlZCBjb25uZWN0aXZpdHkuICBBdHRlbXB0aW5nIGRpcmVjdCBLREMgcmVxdWVz dHMgaW4gc3VjaCBhbiBlbnZpcm9ubWVudAo+PiBjb3VsZCBsZWFkIHRvIGEgdGltZW91dC4gIEhh dmluZyBhIGNhY2hlZCBUR1QgZm9yIGEgcmVhbG0gaXNuJ3Qgc3Ryb25nCj4+IGV2aWRlbmNlIHRo YXQgdGhlIGluaXRpYXRvciBjYW4gY29udGFjdCB0aGF0IHJlYWxtLCBhcyB0aGUgY3JlZGVudGlh bHMgbWF5Cj4+IGhhdmUgYmVlbiBvYnRhaW5lZCB1c2luZyBhIHByZXZpb3VzIGludm9jYXRpb24g b2YgSUFLRVJCLgo+Cj5PcHRpb25zOgo+Cj4xKSBMb2NhbCBjb25maWd1cmF0aW9uLiAgVGhlIGlu aXRpYXRvciBrbm93cyB3aGljaCByZWFsbXMgaGF2ZQo+ICAgaW5pdGlhdG9yLXJlYWNoYWJsZSBL RENzLgo+Cj4gICBVZ2guICBNb3JlIGxvY2FsIGNvbmZpZ3VyYXRpb24uCgpGb3IgdGhlIHNwZWNp ZmljIGNhc2Ugb2YgbG9jYWwgS0RDcyB3ZSB3b3VsZCBoYXZlIGEgc3Ryb25nIGluZGljYXRpb24K dGhhdCB0aGUgbG9jYWwgS0RDIGlzIHJlYWNoYWJsZSBpZiBpdCBpcyBhY2Nlc3NpYmxlIG92ZXIg VU5JWCBkb21haW4Kc29ja2V0LiBUaGF0J3Mgc29tZXRoaW5nIGFuIGluaXRpYXRvciBtaWdodCBr bm93IGluIGFkdmFuY2UgYmVjYXVzZSBpdAppcyBhbHJlYWR5IGlzIGluIHRoZSBsb2NhbCBjb25m aWd1cmF0aW9uLgoKPgo+MikgVGhlIGluaXRpYXRvciB0cmllcyBsb2NhbCBmaXJzdCBhdCB0aGUg Y29zdCBvZiB0aW1lb3V0cy4KPgo+ICAgVWdoLgo+Cj4gICBXZWxsLCBtYXliZSB0aGlzIGlzIG5v dCBzbyBiYWQ6IEtEQyBkaXNjb3Zlcnkgc2hvdWxkbid0IHRpbWVvdXQsIGFuZAo+ICAgaWYgc2l0 ZXMgdXNlIHNwbGl0LWhvcml6b24gRE5TIHRoZW4gaXQncyBub3Qgc28gYmFkIGJlY2F1c2UgdGhl IEROUwo+ICAgY2FuIGJlIGNvbmZpZ3VyZWQgc28gdGhlIGluaXRpYXRvciB3aWxsIGRpc2NvdmVy IHplcm8gS0RDcyBmb3IgcmVhbG1zCj4gICB3aXRoIHVucmVhY2hhYmxlIEtEQ3MuICBCdXQgZGVt YW5kaW5nIHNwbGl0LWhvcml6b24gRE5TIGlzIG5vdAo+ICAgcmVhc29uYWJsZS4KCmxvY2FsIChV TklYIGRvbWFpbiBzb2NrZXQtYmFzZWQpIEtEQyBoYXMgbm8gYWRkaXRpb25hbCBkaXNjb3ZlcnkK bWVjaGFuaXNtIHJpZ2h0IG5vdyBvdGhlciB0aGFuIHRoZSBleHBsaWNpdCBsb2NhbCBjb25maWd1 cmF0aW9uLiBTbyB0aGlzCm1pZ2h0IHdvcmsgYWxyZWFkeS4gUGVyaGFwcyB3ZSBjYW4gaGF2ZSBh IGZsYWcgdGhhdCBhc2tzIGZvciBpbW1lZGlhdGUKY29uZmlndXJlZCBLRENzIHJhdGhlciB0aGFu IGEgZnVsbCBkaXNjb3Zlcnk/IFRoaXMgd291bGQgbWFrZSAoMSkgYW5kCigyKSBibGVuZGVkLCBl ZmZlY3RpdmVseS4KCj4KPjMpIFRoZSBpbml0aWF0b3IgZG9lcyBJQUtFUkIgYWxsIHRoZSB3YXks IGJ1dCBpZiBpdCBnZXRzIGEgS1JCLUVSUk9SCj4gICBzYXlpbmcgc29tZSByZWFsbSdzIEtEQ3Mg d2VyZSB1bnJlYWNoYWJsZSB0aGVuIGl0IHRyaWVzIGxvY2FsbHkgYW5kCj4gICBpZiBpdCBzdWNj ZWVkcyBpdCBjb250aW51ZXNbKl0gd2l0aCBJQUtFUkIuCj4KPiAgIFsqXSBDdXJyZW50bHkgYW55 IEtSQi1FUlJPUiBjYXVzZXMgY29udGV4dCBlc3RhYmxpc2htZW50IGZhaWx1cmUsIHNvCj4gICAg ICAgKDMpIGNhbm5vdCB3b3JrIHVubGVzcyBhbiBvcHRpb24gaXMgYWRkZWQgdG8gdGhlIElBS0VS Qi1IRUFERVIgdG8KPiAgICAgICBjaGFuZ2UgdGhpcyB0byBnaXZlIHRoZSBpbml0aWF0b3IgYSBj aGFuY2UgdG8gdHJ5IGxvY2FsbHkuCj4KPiAgICAgICBOZWdvdGlhdGluZyB0aGlzIG1pZ2h0IGJl IHRvbyBkaWZmaWN1bHQgb3IgaW1wb3NzaWJsZS4gIFRoZQo+ICAgICAgIGluaXRpYXRvciB3b3Vs ZCBzYXkgdGhpcyBpcyB3aGF0IHRoZXkgd2FudC4gIFRoZSBtZWNoYW5pc20gb24gdGhlCj4gICAg ICAgaW5pdGlhdG9yIHNpZGUgbWlnaHQgbmV2ZXIga25vdyBpZiB0aGUgYWNjZXB0b3Igc3VwcG9y dGVkIHRoaXMuCj4gICAgICAgVGhlIGFwcGxpY2F0aW9uIHdvdWxkIGtub3cgYW5kIGRlbGV0ZSB0 aGUgY29udGV4dCwgaWYgdGhlCj4gICAgICAgYXBwbGljYXRpb24gaGFzIGEgd2F5IHRvIGluZGlj YXRlIGNvbnRleHQgZXN0YWJsaXNobWVudCBmYWlsdXJlCj4gICAgICAgYmV5b25kIGNvbnZleWFu Y2Ugb2YgZXJyb3IgdG9rZW5zLgoKTXkgaW5pdGlhbCBpZGVhIHdhcyB0byBpbnRlcmNlcHQgb25l IG9mIHRob3NlIHR3byBLUkItRVJST1IgcmVzcG9uc2VzIHdlCmdldCBiYWNrIGZyb20gdGhlIGFj Y2VwdG9yIGZvciBub3QgYmVpbmcgYWJsZSB0byBpZGVudGlmeSBhIEtEQyBvciByZWFjaAppdCBh bmQgZG9uJ3QgcmV0dXJuIHRvIHRoZSBhcHBsaWNhdGlvbiB5ZXQuIEluc3RlYWQsIHBlcmZvcm0g c2ltaWxhcgpvcGVyYXRpb24gbG9jYWxseS4gSW5pdGlhdG9yIGN1cnJlbnRseSBkb2VzIG5vdCBy ZWFjdCBvbgpLUkJfQVBfRVJSX0lBS0VSQl9LRENfe05PX1JFU1BPTlNFLE5PVF9GT1VORH0sIGJ1 dCBpdCBjb3VsZCBpbXBsZW1lbnQKdGhlIGxvZ2ljIGZvciAoMSkgaW5zdGVhZC4KCj4KPjQpIExp a2UgKDMpIGJ1dCBpZiB0aGUgbWVjaGFuaXNtIGlzIG5vdCBleHRlbmRlZCBvciBpZiB0aGUgYWNj ZXB0b3IgZG9lcwo+ICAgbm90IHN1cHBvcnQgdGhlIGV4dGVuc2lvbiAoYW5kIHNvIGJhaWxzIGF0 IHRoZSBmaXJzdCBLUkItRVJST1IpIHRoZW4KPiAgIGNhY2hlIHJlYWxtIHVucmVhY2hhYmxlIGVy cm9ycyBhbmQgbmV4dCB0aW1lIGRvICgyKSBmb3IgdGhvc2UgcmVhbG1zLgo+Cj4gICBVZ2guICBI b3JyaWJsZS4KPgo+NSkgSW1wbGVtZW50IHNvbWUgd2F5IHRvIGRpc2NvdmVyIEtEQyByZWFjaGFi aWxpdHkgd2l0aG91dCB0aW1lb3V0cyBhbmQKPiAgIHdpdGhvdXQgc3BsaXQtaG9yaXpvbiBETlMu ICBBIG5ldyBSUiB0eXBlIG1pZ2h0IGhlbHAsIGhvcGVmdWxseSB3aXRoCj4gICBETlNTRUMgbm90 IGJlaW5nIGFic29sdXRlbHkgcmVxdWlyZWQuICBQZXJoYXBzIHRoZSBSUiB0eXBlJ3MgUkRBVEEK PiAgIHdvdWxkIGp1c3QgYmUgYSByZWFsbSBuYW1lLCBhbmQgdGhlIFJSU2V0IHdvdWxkIGluZGlj YXRlIGFsbCB0aGUKPiAgIHJlYWxtcyBmcm9tIHdoaWNoIHRoZSB0YXJnZXQgaXMga25vd24gcmVh Y2hhYmxlIChvciB0aGUgaW52ZXJzZSkuCj4KPiAgIFRoaXMgd291bGRuJ3Qgd29yayB3aGVuIHNv bWUgaW5pdGlhdG9ycyBmcm9tIHJlYWxtIEEgY2FuIHJlYWNoIEIncwo+ICAgS0RDcyBidXQgbm90 IG90aGVyIGluaXRpYXRvcnMgZnJvbSByZWFsbSBBIGJlY2F1c2Ugd2hhdCBtaWdodCBtYXR0ZXIK PiAgIGlzIHRoZSBpbml0aWF0b3IncyBuZXR3b3JrIGxvY2F0aW9uIHJhdGhlciB0aGFuIHRoZWly IHJlYWxtLgo+Cj4oMikgYW5kICg0KSBhcmUgdW5yZWFzb25hYmxlLiAgKDMpIGFuZCAoNSkgYXJl IG5vdCBncmVhdDogdGhleSB3aWxsCj5yZXF1aXJlIHNwZWMgd29yaywgYnV0ICg1KSBzaG91bGQg cmVxdWlyZSB0aGUgbGVhc3QgYW1vdW50IG9mIHdvcmsKPnRob3VnaCBpdCBhbHNvIHdvdWxkbid0 IGJlIGEgY29tcGxldGUgc29sdXRpb24uCj4KPigxKSBpcyBwcm9iYWJseSB0aGUgb25seSByZWFz b25hYmxlIG9wdGlvbi4gIFByb2JhYmx5IHdpdGggZWl0aGVyIGEgbGlzdAo+b2Yga25vd24tcmVh Y2hhYmxlIHJlYWxtcyBvciBhIGxpc3Qgb2Yga25vd24tdW5yZWFjaGFibGUgcmVhbG1zLgoKU2F5 LCBrNV9sb2NhdGVfa2RjKCkvazVfbG9jYXRlX3NlcnZlcigpIEFQSSBjb3VsZCBiZSBleHRlbmRl ZCB0bwppbmRpY2F0ZSBvbmx5IGltbWVkaWF0ZSByZWFjaGFibGUgKGxvY2FsKSBLRENzIChVTklY IGRvbWFpbiBzb2NrZXQgb3IKb3ZlciBsb2NhbGhvc3QpLCB0aGVuIHdlIHdvdWxkIGhhdmUgdGhl IGxpc3QgaW1wbGljaXRseS4KCj4+IFRoYXQgc2FpZCwgSSBkb24ndCBoYXZlIGFueSBldmlkZW5j ZSB0aGF0IElBS0VSQiBpcyBiZWluZyB1c2VkIGluIHRoZQo+PiBlbnZpcm9ubWVudCBpdCB3YXMg ZGVzaWduZWQgZm9yLgo+Cj5FaCwgSUFLRVJCIHdhcyBkZXNpZ25lZCBlb25zIGFnby4gIFRoZSBl bnZpcm9ubWVudCB0aGF0IHVzZXJzIG5lZWQgaXQKPmZvciB0b2RheSBhbmQgdGhlIGVudmlyb25t ZW50IGl0IHdhcyBkZXNpZ25lZCBmb3IgbmVlZCBub3QgYmUgdGhlIHNhbWUuCgotLSAKLyBBbGV4 YW5kZXIgQm9rb3ZveQpTci4gUHJpbmNpcGFsIFNvZnR3YXJlIEVuZ2luZWVyClNlY3VyaXR5IC8g SWRlbnRpdHkgTWFuYWdlbWVudCBFbmdpbmVlcmluZwpSZWQgSGF0IExpbWl0ZWQsIEZpbmxhbmQK Cl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fCmtyYmRldiBt YWlsaW5nIGxpc3QgICAgICAgICAgICAga3JiZGV2QG1pdC5lZHUKaHR0cHM6Ly9tYWlsbWFuLm1p dC5lZHUvbWFpbG1hbi9saXN0aW5mby9rcmJkZXYK