Re: The usability of service ticket lifetimes
Nico Williams <[email protected]> Tue, 21 Aug 2012 17:09:58 -0500
| Newsgroups | gmane.ietf.krb-wg |
|---|---|
| Message-ID | <CAK3OfOiMicD2Xe=jYOCLcEWtEZEZB6QyAv1i1QFB9-WZ3Q95Ew@mail.gmail.com> |
On Tue, Aug 21, 2012 at 12:21 PM, Jeffrey Altman <[email protected]> wrote: > As part of any revision to RFC 4120, I would like to see this section > modified. Note that some client libraries check that the KDC does not exceed the limits you quoted. That means that relaxing them will require a KDC options flag in the request... And it should only be used in KDC-REQs where the body of the request is protected (e.g., TGS-REQs and AS-REQs in a FAST tunnel). Nico -- _______________________________________________ ietf-krb-wg mailing list [email protected] https://lists.anl.gov/mailman/listinfo/ietf-krb-wg