Re: Split IAKERB for local KDCs cross-realm setup?
Alexander Bokovoy via krbdev <[email protected]> Fri, 28 Mar 2025 21:01:33 +0200
| Newsgroups | gmane.comp.encryption.kerberos.devel |
|---|---|
| Message-ID | <[email protected]> |
T24g0J/Rj9GCLCAyOCDRgdCw0LogMjAyNSwgR3JlZyBIdWRzb24gd3JvdGU6Cj5PbiAzLzI3LzI1 IDA0OjUyLCBBbGV4YW5kZXIgQm9rb3ZveSB2aWEga3JiZGV2IHdyb3RlOgo+PklBS0VSQiBhbHJl YWR5IGFsbG93cyBmb3IgdGhlIGFjY2VwdG9yIHRvIHJlc3BvbmQgd2l0aAo+PktSQl9BUF9FUlJf SUFLRVJCX0tEQ19OT1RfRk9VTkQgaW4gY2FzZSB0aGUgS0RDIHdhcyBub3QgZm91bmQsIHNvIG1h eSBiZQo+PndoYXQgd2UgbWlzcyBpcyBhIGNoZWNrIGluIHRoZSBJQUtFUkIgaW5pdGlhdG9yIGNv ZGUgdG8gc2VlIGlmIHRoYXQgS0RDCj4+aXMgYWN0dWFsbHkgb3VyIG93bi4gVGhlbiB3ZSBjYW4g cGVyZm9ybSBsb2NhbCBvcGVyYXRpb24gaW4gdGhlIGhvcGUgdG8KPj5vYnRhaW4gYSBjcm9zcy1y ZWFsbSByZWZlcnJhbC4KPgo+RG8gd2UgZXhwZWN0IGEgbG9jYWwgb3BlcmF0aW9uIHRvIHN1Y2Nl ZWQgaW4gdGhpcyB1c2UgY2FzZT8gIFRoYXQgaXMsIAo+d2lsbCB0aGUgaW5pdGlhdG9yJ3MgbGli a3JiNSBoYXZlIHRoZSBjb25maWd1cmF0aW9uIG5lZWRlZCB0byBjb250YWN0IAo+dGhlIGxvY2Fs IEtEQyBvbmNlIGl0IGtub3dzIHRoZSByZWFsbSBuYW1lLCB3aXRob3V0IHRoZSBJQUtFUkIgcHJv eHkgCj50aHJvdWdoIHNtYnNlcnZlcj8gIChBcyBhIGNvcm9sbGFyeSwgaW4gdGhlIGxvY2FsLXJl YWxtIGNhc2UgYXJlIHdlIAo+b25seSB1c2luZyBJQUtFUkIgZm9yIHJlYWxtIGRpc2NvdmVyeSwg d2l0aCB0aGUgc3Vic2VxdWVudCBwcm94eWluZyBvZiAKPkFTLVJFUXMgYW5kIFRHUy1SRVFzIGhh cHBlbmluZyBhcyBhIHNpZGUgZWZmZWN0PykKCkF0IGxlYXN0IGZvciB0aGUgVU5JWCBkb21haW4g c29ja2V0LWJhc2VkIEtEQyB5ZXMsIHdlIGhhdmUgc3Ryb25nCmluZGljYXRpb24gdGhlIGluaXRp YXRvciBoYXMgZW5vdWdoIGluZm9ybWF0aW9uIHRvIGNvbnRhY3QgdGhlIEtEQy4KVGhpcyBpbmZv cm1hdGlvbiBtdXN0IGJlIHBhcnQgb2YgdGhlIGNvbmZpZ3VyYXRpb24gYWxyZWFkeSBiZWNhdXNl IFVOSVgKZG9tYWluIHNvY2tldC1iYXNlZCBLREMgdHJhbnNwb3J0IGhhcyBubyBkaXNjb3Zlcnkg bWVhbnMuCgo+T25lIGNvbmNlcm4gaXMgdGhhdCBJQUtFUkIgd2FzIG9yaWdpbmFsbHkgZGVzaWdu ZWQgZm9yIGluaXRpYXRvcnMgd2l0aCAKPnZlcnkgbGltaXRlZCBjb25uZWN0aXZpdHkuICBBdHRl bXB0aW5nIGRpcmVjdCBLREMgcmVxdWVzdHMgaW4gc3VjaCBhbiAKPmVudmlyb25tZW50IGNvdWxk IGxlYWQgdG8gYSB0aW1lb3V0LiAgSGF2aW5nIGEgY2FjaGVkIFRHVCBmb3IgYSByZWFsbSAKPmlz bid0IHN0cm9uZyBldmlkZW5jZSB0aGF0IHRoZSBpbml0aWF0b3IgY2FuIGNvbnRhY3QgdGhhdCBy ZWFsbSwgYXMgCj50aGUgY3JlZGVudGlhbHMgbWF5IGhhdmUgYmVlbiBvYnRhaW5lZCB1c2luZyBh IHByZXZpb3VzIGludm9jYXRpb24gb2YgCj5JQUtFUkIuCj4KPlRoYXQgc2FpZCwgSSBkb24ndCBo YXZlIGFueSBldmlkZW5jZSB0aGF0IElBS0VSQiBpcyBiZWluZyB1c2VkIGluIHRoZSAKPmVudmly b25tZW50IGl0IHdhcyBkZXNpZ25lZCBmb3IuCgpNeSB1bmRlcnN0YW5kaW5nIGlzIHRoYXQgYXQg bGVhc3QgTWljcm9zb2Z0IGlzIG5vdCBwbGFubmluZyB0byBhcHBseSBhbnkKYWRkaXRpb25hbCBs b2dpYyB0byBsaW1pdC9oYW5kbGUgbG9jYWwgS0RDIGtub3dsZWRnZSBiZXlvbmQgdGhlIGJhc2lj CnJlYWxtIGRpc2NvdmVyeS4gVGhpcyBjb21lcyBmcm9tIG15IGRpc2N1c3Npb24gd2l0aCBTdGV2 ZSBTeWZ1aHMuCkhvd2V2ZXIsIHRoaXMgYWxzbyBtZWFucyB0aGF0IGFzIGxvbmcgYXMgdGhlIGlu aXRpYXRvciBsb2dpYyB3ZSBkaXNjdXNzCmluIHRoaXMgdGhyZWFkIGlzIGJhc2VkIG9uIHRoZSBh bHJlYWR5IGV4aXN0aW5nCktSQl9BUF9FUlJfSUFLRVJCX0tEQ197Tk9fUkVTUE9OU0UsTk9UX0ZP VU5EfSBtZXNzYWdlcywgaXQgd291bGQgYmUKY29tcGF0aWJsZSwgYXQgbGVhc3QgYXQgdGhlIGNv c3Qgb2YgcG9zc2libGUgS0RDIGxvY2F0b3IgdGltZW91dHMuCgoKLS0gCi8gQWxleGFuZGVyIEJv a292b3kKU3IuIFByaW5jaXBhbCBTb2Z0d2FyZSBFbmdpbmVlcgpTZWN1cml0eSAvIElkZW50aXR5 IE1hbmFnZW1lbnQgRW5naW5lZXJpbmcKUmVkIEhhdCBMaW1pdGVkLCBGaW5sYW5kCgpfX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwprcmJkZXYgbWFpbGluZyBs aXN0ICAgICAgICAgICAgIGtyYmRldkBtaXQuZWR1Cmh0dHBzOi8vbWFpbG1hbi5taXQuZWR1L21h aWxtYW4vbGlzdGluZm8va3JiZGV2Cg==