Use ssh key to acquire TGT?
Thomas Kula
kula at tproa.net
Fri Jun 1 09:17:51 EDT 2007
On Fri, Jun 01, 2007 at 06:59:04AM -0500, John Hascall wrote:
>
> But, your point is well taken. Perhaps
> what would be more useful is if somebody
> like educase served as a central crossrealm
> hub (everyone exchanges keys with them and
> gets a current capaths file).
>
I've often considered the possibility of setting up something
like cross-realm.org to do just this thing in a general case.
But it's never been anything more than a passing fancy, as
there are very few realms where I know that, yes, this person
actually can speak with some authority about $REALM and I
know I'm actually generating cross-realm keys that are sane
and proper.
--
Thomas L. Kula | kula at tproa.net | http://kula.tproa.net/
More information about the Kerberos
mailing list