Rocksolid Light

Welcome to novaBBS (click a section below)

mail  files  register  newsreader  groups  login

Message-ID:  

"I never let my schooling get in the way of my education." -- Mark Twain


devel / comp.protocols.kerberos / Re: Authentication Indicators and Cross Realm Trust

SubjectAuthor
o Re: Authentication Indicators and Cross Realm TrustGreg Hudson

1
Re: Authentication Indicators and Cross Realm Trust

<mailman.105.1665181828.8148.kerberos@mit.edu>

  copy mid

https://www.novabbs.com/devel/article-flat.php?id=305&group=comp.protocols.kerberos#305

  copy link   Newsgroups: comp.protocols.kerberos
Path: i2pn2.org!i2pn.org!weretis.net!feeder6.news.weretis.net!tncsrv06.tnetconsulting.net!.POSTED.mailman.mit.edu!not-for-mail
From: ghud...@mit.edu (Greg Hudson)
Newsgroups: comp.protocols.kerberos
Subject: Re: Authentication Indicators and Cross Realm Trust
Date: Fri, 7 Oct 2022 18:30:19 -0400
Organization: TNet Consulting
Lines: 6
Message-ID: <mailman.105.1665181828.8148.kerberos@mit.edu>
References: <SA0PR09MB65397CAF7D4F6D48A3C7A8A49A569@SA0PR09MB6539.namprd09.prod.outlook.com>
<8c438ed3-bd26-eb96-a562-88620a12429a@mit.edu>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Injection-Info: tncsrv06.tnetconsulting.net; posting-host="mailman.mit.edu:18.7.21.50";
logging-data="32648"; mail-complaints-to="newsmaster@tnetconsulting.net"
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101
Thunderbird/102.2.2
To: "Machin, Glenn Douglas" <machin2@llnl.gov>,
"kerberos@mit.edu" <kerberos@mit.edu>
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=Sy20azw0CeCtolCRzYwDYoLm3vV23Cprv4+Egs2T9ihRDZrXzBWglcrnpLr0U2AnsUKrPGnDVky+wwW+qqDicCV3Jgk7hdX5SvF2FFBaD0aiNat+UXtgPge2GwUToLI5nOLXQ6us8gbePcQj1dFwLSW9PQwBCOCMIWtLALabKGaJ1FJpHyTbJHecVIfCLQEU9j1Wba7/vWo/xZLvv7KPvgnHBjevy9kKmMpcLJxMyG0U56m2pfdFAtM+hk/T5oyvINWOWNb/DhQfJbWHjyx6zIQMmPYt+XZ00WjaCFN5ear3eps4/aMI5r8GOpt4xd49SBL1rXo1H4w6cx2dLEDtJA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=uGx89ev1xry6A88OmEu4dchzwloemk1Df30xs2eSljM=;
b=ZEaiAzLJuOXGeE8LWl6dtwfR8fiEC2TGWn7coC3GmG6MPmf94kC8ziVxLDBvwDw8bEw2WHvgOthJEV9Lssv8TAQCzk2jFw99PIjPJ1a6X0d+aZTrErQO8L2Z3Jijyy7QSZvHzMtIMTpXkqNT3UFN+LQvFdCFs5gg3nk+Usws9tmz74zQXi5mMJk64IR+AhK9UN1s1RsrYipHbssMvdsK2vtrfOS6UynLSicZEA52Eblqku3o65pPqa2cczx3143Zys5ZG+D+ZE4xYIOWicYW2WwBIJ1mjwmL16u54oiFr2VU4WfGVW2dNKoHAsO5IwUc0znlvcAXS4Z1uOlM3t12/w==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is
18.9.28.11) smtp.rcpttodomain=mit.edu smtp.mailfrom=mit.edu; dmarc=pass
(p=none sp=none pct=100) action=none header.from=mit.edu; dkim=pass
(signature was verified) header.d=mit.edu; arc=none (0)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mit.edu; s=selector2;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=uGx89ev1xry6A88OmEu4dchzwloemk1Df30xs2eSljM=;
b=qWJEvlsEMHToa2v6yQIqf/5iopQ7B5XqxN+t45hSbdDNCHmb7/pYxlrTTOu2eVwg4l4O7pn+KgNvyM5yDSwhFB7SIZ7QGKREqlyd+EHgWriJA028ivsuKbJy7dC5UBRX917imGmkgsbKWvh0nJtENQTnJ0Lr0Qotgqmpd2oNOZY=
Authentication-Results: spf=pass (sender IP is 18.9.28.11)
smtp.mailfrom=mit.edu; dkim=pass (signature was verified)
header.d=mit.edu;dmarc=pass action=none header.from=mit.edu;
Received-SPF: Pass (protection.outlook.com: domain of mit.edu designates
18.9.28.11 as permitted sender) receiver=protection.outlook.com;
client-ip=18.9.28.11; helo=outgoing.mit.edu; pr=C
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mit.edu; s=outgoing;
t=1665181821; bh=uGx89ev1xry6A88OmEu4dchzwloemk1Df30xs2eSljM=;
h=Date:Subject:To:References:From:In-Reply-To;
b=XR7Gb83/eXqEi2FpYf2q2SAsJa4KeNRxh4GHA88HN43W6eGhvQ6u9auV0+871eB3z
r4I9j8vjrWwJRM0Lwb6OoKUtLhI+U8A/nyGs743jphSENmdxx4BzEIfVAhnKuwrf7K
DljLv4OMheLYkVg2uiXzvCNImhkZU9IIIR/9hHA2chqOlGNYKJu0DZTDRVe+4fvXFX
2mLaDpSZNiseXT4N3DNbSB1ezsOZ0hau/3Cc1EJg1ctmLCmBj4+LBlGbGiXtw2Cdw4
mQEXPpNje5iDwG4eI0rqQOBRggE5RXLVW5/f/umbJhVRFevNTevHK62UDU1T86X14R
Pg3rShTBfpXQw==
Content-Language: en-US
In-Reply-To: <SA0PR09MB65397CAF7D4F6D48A3C7A8A49A569@SA0PR09MB6539.namprd09.prod.outlook.com>
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b:0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: CO1NAM11FT056:EE_|BN8PR01MB5620:EE_
X-MS-Office365-Filtering-Correlation-Id: a6c64264-2e65-4efb-7125-08daa8b38725
X-LD-Processed: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b,ExtAddr
X-MS-Exchange-AtpMessageProperties: SA
X-MS-Exchange-SenderADCheck: 1
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: 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
X-Forefront-Antispam-Report: CIP:18.9.28.11; CTRY:US; LANG:en; SCL:1; SRV:;
IPV:CAL; SFV:NSPM; H:outgoing.mit.edu; PTR:outgoing-auth-1.mit.edu; CAT:NONE;
SFS:(13230022)(4636009)(39860400002)(396003)(136003)(346002)(376002)(451199015)(53546011)(31686004)(8676002)(5660300002)(36756003)(2906002)(6706004)(110136005)(70586007)(86362001)(68406010)(316002)(6636002)(4744005)(31696002)(786003)(478600001)(7696005)(26005)(956004)(2616005)(356005)(426003)(75432002)(336012)(83380400001)(43740500002);
DIR:OUT; SFP:1102;
X-Auto-Response-Suppress: DR, OOF, AutoReply
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 07 Oct 2022 22:30:24.1805 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: a6c64264-2e65-4efb-7125-08daa8b38725
X-MS-Exchange-CrossTenant-Id: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b
X-MS-Exchange-CrossTenant-AuthSource: CO1NAM11FT056.eop-nam11.prod.protection.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN8PR01MB5620
X-OriginatorOrg: mit.edu
X-BeenThere: kerberos@mit.edu
X-Mailman-Version: 2.1.34
Precedence: list
List-Id: The Kerberos Authentication System Mailing List <kerberos.mit.edu>
List-Unsubscribe: <https://mailman.mit.edu/mailman/options/kerberos>,
<mailto:kerberos-request@mit.edu?subject=unsubscribe>
List-Archive: <http://mailman.mit.edu/pipermail/kerberos/>
List-Post: <mailto:kerberos@mit.edu>
List-Help: <mailto:kerberos-request@mit.edu?subject=help>
List-Subscribe: <https://mailman.mit.edu/mailman/listinfo/kerberos>,
<mailto:kerberos-request@mit.edu?subject=subscribe>
X-Mailman-Original-Message-ID: <8c438ed3-bd26-eb96-a562-88620a12429a@mit.edu>
X-Mailman-Original-References: <SA0PR09MB65397CAF7D4F6D48A3C7A8A49A569@SA0PR09MB6539.namprd09.prod.outlook.com>
 by: Greg Hudson - Fri, 7 Oct 2022 22:30 UTC

On 9/30/22 16:06, Machin, Glenn Douglas via Kerberos wrote:
> Can someone tell me if a TGT containing an authentication indicator will work over to a service principal in another realm which has a cross realm trust relationship?

Authentication indicators are currently only accepted within the same
realm; cross-realm service ticket requests do not preserve the
indicators from the cross-realm TGT.

1
server_pubkey.txt

rocksolid light 0.9.8
clearnet tor