Re: The usability of service ticket lifetimes

Nico Williams <[email protected]> Tue, 21 Aug 2012 17:09:58 -0500
Newsgroups gmane.ietf.krb-wg
Message-ID <CAK3OfOiMicD2Xe=jYOCLcEWtEZEZB6QyAv1i1QFB9-WZ3Q95Ew@mail.gmail.com>
On Tue, Aug 21, 2012 at 12:21 PM, Jeffrey Altman
<[email protected]> wrote:
> As part of any revision to RFC 4120, I would like to see this section
> modified.

Note that some client libraries check that the KDC does not exceed the
limits you quoted.  That means that relaxing them will require a KDC
options flag in the request...  And it should only be used in KDC-REQs
where the body of the request is protected (e.g., TGS-REQs and AS-REQs
in a FAST tunnel).

Nico
--
_______________________________________________
ietf-krb-wg mailing list
[email protected]
https://lists.anl.gov/mailman/listinfo/ietf-krb-wg