Path: i2pn2.org!i2pn.org!weretis.net!feeder6.news.weretis.net!tncsrv06.tnetconsulting.net!.POSTED.pch.mit.edu!not-for-mail
From: hedr...@rutgers.edu (Charles Hedrick)
Newsgroups: comp.protocols.kerberos
Subject: Re: 2FA with krb5
Date: Fri, 15 Oct 2021 16:52:56 -0400
Organization: TNet Consulting
Lines: 24
Message-ID: <mailman.0.1634331199.15600.kerberos@mit.edu>
References: <5ee92454-ec38-d5de-5b36-4b2d87fd7f@prime.gushi.org>
<202110070127.1971R4KA032759@hedwig.cmf.nrl.navy.mil>
<87pmsgpt36.fsf@hope.eyrie.org>
<202110071914.197JEXTD007325@hedwig.cmf.nrl.navy.mil>
<87lf34prw2.fsf@hope.eyrie.org>
Mime-Version: 1.0
Content-Type: text/plain;
charset=us-ascii
Content-Transfer-Encoding: 8bit
Injection-Info: tncsrv06.tnetconsulting.net; posting-host="pch.mit.edu:18.7.21.50";
logging-data="19592"; mail-complaints-to="newsmaster@tnetconsulting.net"
Cc: Ken Hornstein <kenh@cmf.nrl.navy.mil>, kerberos@mit.edu
To: Russ Allbery <eagle@eyrie.org>
ARC-Seal: i=3; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=pass;
b=Jx8jvj1tWvaZ6P+KDZGMV+sWi5UMHIeWE6v/6lNS2AbWTNTEKnZxQeyIn1em/55YaGpzghpEFCYcaZ3mPnIW/AByzKXKBsy7I0Sn/PsVWJVGqfByRXZ5ESHsvdKjuyifuBFCLdnulOGIb3Q4CLy17ovsDO+Tmr8btHUmDaGKdWLmWikVGHxpDuP5mabI0A0dGiOnhFHv0rddJPug/LA8CKHKbdXMwjfxjkW+f5y5za+MmrmIDC8vvcnlWCit0dka3FY+bubY9f4ULwmx9Nld/xV0hhs6qB7lO+tU9YZC+xQQYzvyj4eJM9MYyE47ajRF+E3HuQ3ylaXy7FqXqdxlYA==
ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=IhYOLf6oKAALBO/WlllQ7tPerB+eijYTMCv6pc060IU=;
b=Kbxo730wXfX5x2ll47K7DFxDT8/hkp51YAdwkCMUOsCzNNBl6aaKgLY4CiRG4YN8zEXdhf3nHjnCZl/SKDYRJ4Mn9Mw9J5zR0X6DN/DE0KVk4CMw7eaElJdxnv2vC8iY2PmRFntnIFzkIrL36rg9PEDNbHuKB7z5bHmH0mT7Z+oWqc9PpAjg8xGX31eGZmDVVGAX4kp1S1AcHVt13RyQ2qtJWFk5BJb7c0dWFLXROXveV/xUtI20afaEpe+pZDeiDGZpeg2PNp7UjPxr9YeonYncdBLwlpV7qNdDIKjHdvMmDf4jNKQIS6Lsl5EBKCTBS4f0KYjNsbkkl5SABcEAAg==
ARC-Authentication-Results: i=3; mx.microsoft.com 1; spf=none (sender ip is
40.107.237.120) smtp.rcpttodomain=mit.edu smtp.mailfrom=rutgers.edu;
dmarc=bestguesspass action=none header.from=rutgers.edu;
dkim=pass (signature
was verified) header.d=rutgers.edu; arc=pass (0 oda=1 ltdi=1
spf=[1,1,smtp.mailfrom=rutgers.edu] dkim=[1,1,header.d=rutgers.edu]
dmarc=[1,1,header.from=rutgers.edu])
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=mitprod.onmicrosoft.com; s=selector2-mitprod-onmicrosoft-com;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=IhYOLf6oKAALBO/WlllQ7tPerB+eijYTMCv6pc060IU=;
b=NdHeFF7VyppnA1bpfgrwW280rxjgLb8I2rCoXic/RfD/67r3i8ZQkwct4lsYTHCSwjwSvSNG/fkENUKrjXi92Hd7IIaUEb9IFr615cX1UxXsPAoQEeGr9594QddLGNg7jiDQxqY217B00YjV7IfRV5xXYKZoPPHI2VHjh00xHfw=
ARC-Seal: i=2; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=pass;
b=RsJkEnMTwhQ4s157od4cViHyvTVufXMcTY4aXjWgc+X3kPZg48wULyefln4gkilY7LHomU+vwrHYE6t9t1483vBbz5zSD4weadZBterWGhsce55pzzcRiJ065vtnYtMwjMGK9W6JKUCZJ/58YVQAdNlS6bYQd5XqxzOL/SjNyxfGaGlzgJBJZZKIz1R0l3CNS7Pf9OPHGsItHh4BYBNihklODm1PC+RAcfSKv1+NerSF1q359dVBkxmtUjbXOjn2wkGh+Ymx5zgU8tlcXx459mVkA8mFpQP1F/nDlt/glvlRATVBjtJm4NT5+vn6a3qeH48UbUUc58PZabspt/UlKg==
ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=IhYOLf6oKAALBO/WlllQ7tPerB+eijYTMCv6pc060IU=;
b=grPmYiT/hwhUJsBALJ+h3y+N6x41uvbX/ltTeqaOYdClE4Hqd8TYhafldjBOZU2iOMF1kwn14SuMg2nJ3Wlx8c1bw9cOijkkevYImOKW+H+nEFqNRbZFws5Z0fKak0aV6mqvFXW7UAd+KjEw9F4RMH6sD5kiQFs57bntOAmYbUq0wIv6Gqegs3TdEbpX6xK0pbuqpucSBHQLt5hGebrdjv6TCoavmbS0+176mOMbLNCD/MypdkGZt4tdAUgoimjMKIdF53mBlh6tqwGTKMoBh20+DBbLAHvAZkRbbB2JmmZhwosPB2CtbEJYRqSZ/DVlzG1byGaB2u0X9NcWmMPemg==
ARC-Authentication-Results: i=2; mx.microsoft.com 1; spf=none (sender ip is
40.107.237.120) smtp.rcpttodomain=mit.edu smtp.mailfrom=rutgers.edu;
dmarc=bestguesspass action=none header.from=rutgers.edu;
dkim=pass (signature
was verified) header.d=rutgers.edu; arc=pass (0 oda=1 ltdi=1
spf=[1,1,smtp.mailfrom=rutgers.edu] dkim=[1,1,header.d=rutgers.edu]
dmarc=[1,1,header.from=rutgers.edu])
Authentication-Results: spf=none (sender IP is 40.107.237.120)
smtp.mailfrom=rutgers.edu; mit.edu; dkim=pass (signature was verified)
header.d=rutgers.edu;mit.edu; dmarc=bestguesspass action=none
header.from=rutgers.edu;
Received-SPF: None (protection.outlook.com: rutgers.edu does not designate
permitted sender hosts)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=cl8vgmtY7q8aZWdQsdO5bzLIvXVoAZPcGiG4zmzTp+ZLto7BWivhoA4yBAkiYI5FJvRmV3REtmWMWGfkiFDDzjO65rJsCc4WdrKQabUawlvbDTVsNMGNGyG9nVEJKis1MC+hxLPshtvRO2BJn0uL1R9czR5uPN2wnhGQDChbxEVdc6suRn9Qw7yUJ1tWtgbKS3PV6CCN1OxuItZu1D1Q/rI9WjEPtQmsLFP+2FwP7Nmet5d2mIUcUnLXOV+uvKH4hBmq9VKlxWCWGH+1rPWXkhqvmqkRFIGJVOxo0rh5NRpNS27yc+I1B++6xfj1YYjbORo3iZVvmVY+5UjqEHt9HA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=IhYOLf6oKAALBO/WlllQ7tPerB+eijYTMCv6pc060IU=;
b=R0/e4r5qxJv5uxPH1CzxaskClfjoVxlKlBvSvF2oJsY6wqvfHFfUxcjhFqcJAXaci8KI4Bs4k58b7ZRVtC47TDp4UvJdPbod/m62/BIQg4SdxFNoya+Md9vXGLEeUu5TaYpcVS/B8UUcDNr/pz7+68stG90qwrtZkMVKC3XvCXaKB7INuCVgJujHG/fZRb62qfQqKi7DdRzqrG2mdhswuiG29Mpy1NENbRa5cu74U089NRO/JhrJgxg58SRv0tatK2sRt2y7rvWBVJ/syFRPUwHbIKsfcHSN1GhiFDkBSe60IrjDXJ6DQSHauyPyt9Yq0W4P1xmu7BWzG2MCAwV0Tw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass
smtp.mailfrom=rutgers.edu;
dmarc=pass action=none header.from=rutgers.edu;
dkim=pass header.d=rutgers.edu; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rutgers.edu;
s=selector1;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=IhYOLf6oKAALBO/WlllQ7tPerB+eijYTMCv6pc060IU=;
b=F8MSYO/0PNroaMCHa+rBshwmc3bZ0WN5LEMW8e0MfeH3Ml2oHC7T7tyU6G5cHabGHySFRfyEva+sQ1pgAvovpF2CdKBhj5GyymioQVc8qdOx88s/yAwJ5SfS145+6z322hiDnFff6HzarghIsXZSswfev3TSntXlmxgcxo+cKPQ=
Authentication-Results-Original: eyrie.org; dkim=none (message not signed)
header.d=none; eyrie.org; dmarc=none action=none header.from=rutgers.edu;
In-Reply-To: <87lf34prw2.fsf@hope.eyrie.org>
X-Mailer: Apple Mail (2.3654.120.0.1.13)
X-ClientProxiedBy: MN2PR14CA0030.namprd14.prod.outlook.com
(2603:10b6:208:23e::35) To BL0PR14MB3588.namprd14.prod.outlook.com
(2603:10b6:208:1cb::7)
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: c97baa8f-4fe4-484f-e338-08d9901dc684
X-MS-TrafficTypeDiagnostic: MN2PR14MB4095:|SJ0PR01MB7240:
X-Microsoft-Antispam-PRVS: <SJ0PR01MB724011EDDBBDEB879CF9D21DAAB99@SJ0PR01MB7240.prod.exchangelabs.com>
X-MS-Oob-TLC-OOBClassifiers: OLM:8273;OLM:8273;
X-MS-Exchange-SenderADCheck: 0
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam-Untrusted: BCL:0;
X-Microsoft-Antispam-Message-Info-Original: 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
X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255; CTRY:; LANG:en;
SCL:1; SRV:; IPV:NLI; SFV:NSPM;
H:BL0PR14MB3588.namprd14.prod.outlook.com; PTR:; CAT:NONE;
SFS:(4636009)(366004)(8676002)(66946007)(508600001)(8936002)(4744005)(5660300002)(66556008)(6512007)(66476007)(52116002)(4326008)(2906002)(53546011)(966005)(83380400001)(6916009)(186003)(6506007)(38100700002)(75432002)(33656002)(6486002)(36756003)(86362001)(2616005)(786003)(316002)(45980500001);
DIR:OUT; SFP:1102;
X-MS-Exchange-AntiSpam-MessageData-Original-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-Original-0: 5xIl7tVMeega2TmW/2fIVOed23xbFm+PuWte1r+Ir/A/8A9uVuIH1cOJKJ8t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X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR14MB4095
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b:0
X-MS-Exchange-Transport-CrossTenantHeadersStripped: CO1NAM11FT028.eop-nam11.prod.protection.outlook.com
X-MS-Exchange-Transport-CrossTenantHeadersPromoted: CO1NAM11FT028.eop-nam11.prod.protection.outlook.com
X-MS-Office365-Filtering-Correlation-Id-Prvs: 70349f63-86d3-4751-83df-08d9901dc49b
X-LD-Processed: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b,ExtAddr
X-MS-Exchange-AtpMessageProperties: SA
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: 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
X-Forefront-Antispam-Report: CIP:40.107.237.120; CTRY:US; LANG:en; SCL:1; SRV:;
IPV:NLI; SFV:NSPM;
H:NAM12-BN8-obe.outbound.protection.outlook.com;
PTR:mail-bn8nam12on2120.outbound.protection.outlook.com;
CAT:NONE;
SFS:(4636009)(4744005)(6512007)(6486002)(786003)(316002)(4326008)(75432002)(6862004)(83290400002)(83300400002)(356005)(83380400001)(83310400002)(83320400002)(83280400002)(86362001)(966005)(7636003)(508600001)(5660300002)(36756003)(70586007)(68406010)(2906002)(53546011)(6506007)(33656002)(8676002)(2616005)(26005)(336012)(45980500001);
DIR:OUT; SFP:1102;
X-Auto-Response-Suppress: DR, OOF, AutoReply
X-MS-Exchange-Transport-Forked: True
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 15 Oct 2021 20:53:00.6815 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: c97baa8f-4fe4-484f-e338-08d9901dc684
X-MS-Exchange-CrossTenant-Id: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b
X-MS-Exchange-CrossTenant-AuthSource: CO1NAM11FT028.eop-nam11.prod.protection.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SJ0PR01MB7240
X-OriginatorOrg: mitprod.onmicrosoft.com
X-MIME-Autoconverted: from quoted-printable to 8bit by PCH.mit.edu id
19FKrHdf015179
X-BeenThere: kerberos@mit.edu
X-Mailman-Version: 2.1.6
Precedence: list
List-Id: The Kerberos Authentication System Mailing List <kerberos.mit.edu>
List-Unsubscribe: <https://mailman.mit.edu/mailman/listinfo/kerberos>,
<mailto:kerberos-request@mit.edu?subject=unsubscribe>
List-Archive: <http://mailman.mit.edu/pipermail/kerberos>
List-Post: <mailto:kerberos@mit.edu>
List-Help: <mailto:kerberos-request@mit.edu?subject=help>
List-Subscribe: <https://mailman.mit.edu/mailman/listinfo/kerberos>,
<mailto:kerberos-request@mit.edu?subject=subscribe>