Rocksolid Light

Welcome to novaBBS (click a section below)

mail  files  register  newsreader  groups  login

Message-ID:  

Well, Jim, I'm not much of an actor either.


devel / comp.protocols.kerberos / Re: Kerberos token

SubjectAuthor
o Re: Kerberos tokenm_a_n_j_u_s_k@yahoo.com

1
Re: Kerberos token

<mailman.78.1711284762.2322.kerberos@mit.edu>

  copy mid

https://www.novabbs.com/devel/article-flat.php?id=530&group=comp.protocols.kerberos#530

  copy link   Newsgroups: comp.protocols.kerberos
Path: i2pn2.org!i2pn.org!usenet.blueworldhosting.com!diablo1.usenet.blueworldhosting.com!tncsrv06.tnetconsulting.net!.POSTED.mailman.mit.edu!not-for-mail
From: m_a_n_j_...@yahoo.com (m_a_n_j_u_s_k@yahoo.com)
Newsgroups: comp.protocols.kerberos
Subject: Re: Kerberos token
Date: Sun, 24 Mar 2024 12:52:28 +0000 (UTC)
Organization: TNet Consulting
Lines: 30
Message-ID: <mailman.78.1711284762.2322.kerberos@mit.edu>
References: <628253825.301474.1711129798132.ref@mail.yahoo.com>
<628253825.301474.1711129798132@mail.yahoo.com>
<202403221927.42MJRNx0002777@hedwig.cmf.nrl.navy.mil>
<698375700.698118.1711284748728@mail.yahoo.com>
Reply-To: "m_a_n_j_u_s_k@yahoo.com" <m_a_n_j_u_s_k@yahoo.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Injection-Info: tncsrv06.tnetconsulting.net; posting-host="mailman.mit.edu:18.7.21.50";
logging-data="1486"; mail-complaints-to="newsmaster@tnetconsulting.net"
Cc: "kerberos@mit.edu" <kerberos@mit.edu>
To: kenh@cmf.nrl.navy.mil
DKIM-Filter: OpenDKIM Filter v2.11.0 unknown-host (unknown-jobid)
Authentication-Results: mailman.mit.edu;
dkim=pass (1024-bit key, unprotected) header.d=mitprod.onmicrosoft.com
header.i=@mitprod.onmicrosoft.com header.a=rsa-sha256
header.s=selector2-mitprod-onmicrosoft-com header.b=evhI6UHn;
dkim=pass (2048-bit key,
unprotected) header.d=yahoo.com header.i=@yahoo.com header.a=rsa-sha256
header.s=s2048 header.b=p7CLsFv6
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=IqxgseXlFv6ppsHSyUArkDvhwfKlss9Ou9pHmYtKIThNZzO7dZoA/7EgJBkQhaGx4/rG+aWTMqAhI0VzXmORagRLda1vMHCFaA14WRd49ixCc6cAto5lW6ZePEKvXHejJA6qBKNxV6hMxpmhPIsYJMD9RD5U4pfZ3aMGCDBH4Pac16FbnzbySvR1njT9fVfU0bcTtI0qCwKXqT6hvHG5X2ACsJPmKyl4pio2ZXtbcJYcC5ZC41f9T1BiE7vHughmQjjXVRLIz2ozpGTYqrHjPSUcA8PqN0JygoFO35rnvX1rlZA/wp3VCRnRjdh32YZtGdgm8cxdzpr/tvZkmL0QjA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=7pZNsEEVhBzyI1HJizaGDcFEYNptHahdDKpa+mcPwhQ=;
b=beRKpyFIRx2oIptwgORCmEThZ5RP59GoTxVOYzL/NV5XBgcQwLCYFdj+oLXt3ONFPdkZJuywMmZ2IapiJiGQq7jZz/4JLGQXrFOnjhv6XriuhslE9Dw5WzVTgCx1L+wJbNtTrIRVvsCj+WPYOPBJRpaZC8cnn9AAzfN98UEonbE0iwHfb9SUzgbtlIOcyNgVZmviNUEYI8U/MvuiG4hgcdS+Mum2XyXbeZMh3GnIHcX1f2rfBgg+K7WwsmAszCw/qRdKw1L3Q/zHlUh0kzJ6H3+M5bqTAyzKVYQ8oWzw8LAd3wvLPbP5/IkmEN07WpOBXu3+IIc+O0uxn7wusc9QOg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is
66.163.189.82) smtp.rcpttodomain=mit.edu smtp.mailfrom=yahoo.com; dmarc=pass
(p=reject sp=reject pct=100) action=none header.from=yahoo.com; dkim=pass
(signature was verified) header.d=yahoo.com; arc=none (0)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=mitprod.onmicrosoft.com; s=selector2-mitprod-onmicrosoft-com;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=7pZNsEEVhBzyI1HJizaGDcFEYNptHahdDKpa+mcPwhQ=;
b=evhI6UHn4iZTugpDDvK0xuJTAooarPBNgw0981yATX/ZoGEe89LohmNdjGVprvJKLctbS6+BmRFgspmYULUv0tWDXPzvFo4FweL/ZZdPxLWfRsvfsJp4cfAJDzfn3CCDPV9HMP9XoaqgseY9tAJq4h8cer8l7/0oMPkp0Y8XtX8=
Authentication-Results: spf=pass (sender IP is 66.163.189.82)
smtp.mailfrom=yahoo.com; dkim=pass (signature was verified)
header.d=yahoo.com;dmarc=pass action=none header.from=yahoo.com;
Received-SPF: Pass (protection.outlook.com: domain of yahoo.com designates
66.163.189.82 as permitted sender) receiver=protection.outlook.com;
client-ip=66.163.189.82; helo=sonic306-20.consmr.mail.ne1.yahoo.com; pr=C
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048;
t=1711284757; bh=7pZNsEEVhBzyI1HJizaGDcFEYNptHahdDKpa+mcPwhQ=;
h=Date:From:Reply-To:To:Cc:In-Reply-To:References:Subject:From:Subject:Reply-To;
b=p7CLsFv602fjYyfXAGzHnRrKpuXKbRNk+a5cPOKfjuqoUWgpmMoCrXgQeI690sHg0Q0SaOHVL5J7OxCgU1QnIQ9Avp8dOQorzmoqB23+z05eXluTD5JdyPzHYOa3bwuOtF3lQ7qsV5NYhoak1Eo1MQkR2h79ABz5twKlv+Vosbf9PLq5gkHRdFTHNWqkUOGih23SZZjETa4fjOKz5e2nJxR6pyCrqv19gdC6K/wg5nhfkKTo1t5sZjBitxJY3/1i8gvMeTvQQrm2TzZNx/XApNaTUSFbu20zL5Jbf141/4lUEmJnpJfc3ceIMJuFBBo1LKhbS6Fx2JAu+YdEhrUJXw==
X-SONIC-DKIM-SIGN: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048;
t=1711284757; bh=wYVg1kSm//OzYRwW6f7/GWX+vQHhgH38YwLgYNgMxck=;
h=X-Sonic-MF:X-Sonic-MF:Date:From:To:Subject:From:Subject;
b=U4niyLgv/vCK6xNuKrDSZFPJolCj1UFjF36dEMOrJiJNb29LaTm7B2XREuLttvhbgPvAapMyuwjPatTuT7CoMlDwPfMjzzn3SVWjPZiZeMUA2onCaFAqOTzmYj1CAwNAbGFRUkiRMaY0YtinHnUlfAD5pSK5IpEbgGEydPtvKywInzmoiYgNM+LevbhkowHf2q/Y+5rKZZdQS4q6hNlbecjjlUDR/4A3HFAid36lxA6Ar5Q2c8MDjcX2gc6dPWochVBD3lxPiLKOv9CRyhxZooH/dvJ7qjO+SJ5LJcCZfkQKxg8D4rSgai3cRqSW6Gbh7puUooP1STmTKwjwfXVJkw==
X-YMail-OSG: jqjrgsgVM1nFSq9jEvqMbr4ff2hyA5ZHHS73Pjq.PqxXG9T41zvwwrHiwE..mvQ
yRcKG79eklcK886r1xSxAcBsksxh_GHauxfBEmz2TpFv2XrWxl2hPMYic9JhH9eq8nkKMsw9qRbt
OLdM6OqCAxCvre9D3IGUAphzktLabkjxuEXRrUDAEoAEbMWteW28kIBnJkrcKE.vv2hpQZP6f5Q9
43o6I8N297ryrUNHPJQt8or1wHehXilbD9bWXBD3M7N.ibzwh4sGQJ6xYmWXapInayk9lyFEpJog
TTBLKT_zjB5WuUw..zLfy4atk5l.ghjxbkkq50NcCxRhCh1e2HhdbGJgu9Gf7nSiRCPeadcgk_TE
LvbEY7i6TThlFLwVCiy9mtjWnf1lQELhQ.1pBgymnXKpvqSbCkby5ag_2VhMbU4y5_58em62kGP3
1YTTkAsMrpO2r1ZZMZMgOcB2czF.Js6yhyQ1fTX1zLcGFvZ6wcgRrwBYlnUz_R9A0YdSbFbTA3Kd
n83SebKMa91fY1Lqb462_8I74DCIAjA2ophLdtAonI2H4ypsmpTSfgBMqc6usVwkzyZx9d_8bAri
GgGNTnIPIWiq4emRU7RZKADmYTM3GV4DLIc5OnfS9jYqG54pBRWswD5Yh1iAh6tzortw2oee5eLe
sfPAQGVFaej8ir9yEyGJsYjmllZNKZPj12LVZ9OSqJPi_qULLDfwPvFT2yTgzqGTOaTuP9snY65v
R0hY2VTtZi0CfwHD9ad6oSq59FyXsGU4TBstqZAKttM36rU5EsVvDZrqLouniZ6Hd2emOt9vvltn
W0cAZaOEnKC4h2T0IgbUWFtV6cGVW7DI9b6C95TEdZMkzhfOGuRh7NYMKKCU_Bwt_lC0ONDcZUaI
vQVflvVKAgcuDyv8LMpmxV9sbhNLY._fjrEyPLM09RNMyz85AbkgGksZO40L3.8uobVpsFZuQwVE
sZHFPoMaGWivTDfYBDcAO1Z2yfxKwiCF6_XvPpr3r864wJuOu9ehQX5O1eMegmMvzvQ3qA99dt0s
JExoAF21wIh_LFBPBPUPBhfMCZNLpM8aYA8gJnd0hLMH9hDBtejMgCMO8.6mmYu6tzjLDdH46.9l
sbK4.e3NP9pauv1pUD2zvFaWs68PtsflxBqABwgCY8oOZGwI3AIPObX7jRl.proU62LrC8Rrxcs8
RxUjF31PSN3WFHpUNhxTRn2Xu_za17v7GxLZB2oFdFM99izyx9B90aOhwGSCP86l7IHaU3oxDZu9
BgbL.HWSR8htCOW0i2xMO8Ij_2N4u5PVa7bOG98UJ10EeoQeWpre53DvVwhLU0YkMry2QV499hu4
hrnBb.rQlJj8bEX.T4j87nZ.EhxnUhjxX65hqsq1rL.UzBjVpUmGecnOSXl6M.7.xkks8bC__P_P
Vu11veFYBIkg1lzZDkkGljcbzV7TfCDS.osMAoM3p1hDj4yzOBcwCGdEsOSxS6hnL3kQzyBuUQA8
opBzptwNpL.JffswbkoaM8J14ld574z_DitGpLDSlqQegRtTqehACOXoLdz8pnk9jz66BB7LMTfO
xgxBxRsYEcVUP0ZbeYH2UgdmFipVpnX59E1oeAjjvjqupu00NMI.uwXhTiwRRkUOR5F2ftC2M8Xq
nN86hVojDPL0ZdLicaAGSXvZE1MPcBbfleFH_pwQe54kPqaZY7R4MzdtzXu_JGTrd2RrKnYWhKAY
1Shhe7EMzLg7ax3p_6XP8Cwdye5c42vkCqGJGVOo2Qh5I1_Gu7ATpN5a8orAurbH0wrHxupts.Bp
9P8JDMBjU0OrzaJbOmYT1flEkhXLqY1WjA4RyS4cuayDS99i8QnMZlyRIichNoh8Vqdv2VQNIKow
8IssVWyvrZoEOsUNUuofn_1IvCjM.r.a8_gofcHZb6.a5fp1w8ZeRo.ChY5ZzEwNYJdfww.h_wPz
DVDjmxClYljATPQ08GiYzZR8fh2VrkF2ATuY7Fpgn9XwPKSwv0aXTV77E5zhjb.kTLM8eB0T_DDh
sLF6kgjaDrqdSGDaeQYYuW4zQfHIKFq7uP5xd2Tu3AZMh_MvMkio5DZfrtH9opfc6ZxcE4kuse3M
KB5TSkeOOCmZJRbZUrfSd1NjSq4cZ0mOv8bPRqNLZSHCbfsR4G.M9tOAbYHqO_AhRlPVNcIU6vH4
KMtYZcCvg4HdSmid64IBXpgFPGEI68wCmk0H3ZnoaNtYOCqSiVCFXgIRHl6Zl7qBdb3jJrI_8UMw
2VkQUWblK28rQwIvwMwmlhM5fXZNbXcTeUBPl82xQk4LG7n4zbDTC7n0Od3P3SYh.hI4aM2i3Wzq
W3DiTMtyya2kzpYRZDwpq.ILeCm8sDqgKSkGn0Gyuv.VAwUkAXzWJIXCzMroxx7NA
X-Sonic-MF: <m_a_n_j_u_s_k@yahoo.com>
X-Sonic-ID: f952d016-10da-4f52-a4ab-382790af8844
X-YMail-OSG: G9gKktAVM1mUxikKi5fwg2BTcLHp3XLG6Oje7gWiKR_MJ1eFTxwEhjzNVEEANFB
O4YPnzZmanCGpY2i4wpYCc1McKlAsimVs533h.NYDD1r7EdMkmfGOKduSVBQDI7eNSmS_kvXqp2g
5qB3HrG8.VdhsirwqFXAdy8w5Cs7H_VW00fgrxNQpcTWdqQTq7uASUTOsJMpbRB1kam7vA2p3ivs
TT9OHLDCHshEVAkbtmgVFQpE5LJsfe18n9ZAAhiiqv1RVDKYNjJqFXcggjqUOjzT8sCZWVd1Adw0
dkXl1sqEoafrDa2CPae6FXvNC0sOR4hFErp5ysXG2VpOmz5m18eEY2iO3TZhwRnfwCODcaSnsIs8
64L9xtxE3u9z3OQPsRmfpCHiNgofAafNuRrEBYQmP_otWYkSh5dYutjDpcfNKAbuL37YDfR69E_2
21xdIXmNKu4hYAd3bnz1_hmHvzB5ZoNKQ8DKeAnvvrV9pmBhshO3MPUr34HuThaozCDp71gKDDSo
TsgjDwQ_9CENJ2s3jLndmaZdiQjQUsgS7.bNqGSfWyxIqdgcAyBKPg6rabnWRlDshb6GLllBEvXA
jl6riJ3lK1D4ws.cBOEQXFFEliTQ4epNZvCwsVTpc7ze1Bqbitj5yxU_4bniVRgCHnNFBwDKTtT7
xl2xmSMk4wJho0YhytYwXcmA1PTSsYaHV2mAnV23IV9jpjgpvN8IBw46JTBdov2JsGct0NHQt_Mz
Y.7XCCSlB_mAP_7ZR5H4mTLY8GHQWfcO91vSClsTBuZo30IowTDAi6.yoiPFfkXCOwiZ2aCesoMi
wOb_VwHpIdHj.x5f4FSHb9uxGrOVi8vJaj11P8oBFJFwNzua40otRzyb.xSHLR.uBQJRtN2hB58S
rgvkXJ_cFiyo8IPxQEUhDE.KTC5cHKJXHP7amH9xM2MtD3RQXoFfY34pBWZyjBAwfXX2jX_T611j
Vp4fk1MR05wGSrSjGxjalUvgRepILZQU9ZEwxsktwIdRU8ouqEZdX6XSpb2jDBeDa_l0xT.HQL35
Qg6lu7hyExK1JsVNHXR2n2nWoIhlnryJqCJp6QeyWlV0POBREDxrjvpB4bhhdRNxSDHMr3hvcbNA
02BeWpY8gHbSijcI5YWi8D8dpBBDwcZ2iE4U16J3Q_j.Cm_jOTR3bGTlfUz2tOaXDaRZkEFNSg.P
FplBOmsnbYwGLchcTTO3_dHyJ6m089XCzWABzULH.oolLbQpznn_Zp7VKUPkmEyc7gK1IM3K0Z4u
dmAlXbIVlI75ncaK5zQF_Dfg3sgYBC.MreW8.3XKeeRTgvv6w4je2SsBItvyjy3d.tw2rVnL553.
HruNRbvLkpBGr1qxJIOuiDmEtAY.Bfb.9qF7uHw0nUN0MuKE29FoOgiJbJntprbB.Zhh72YWAMOB
hFucKzXGNAJfBSc2EO0vvL6YkJRmVY8eY53bgrBO7PoJxMFXds.bxI9.Dega9NmajnxC.D6KkD4K
B8ydRkHLqz6VGOkzhZD9TrRf2fyGXwahyGiQht5tdcvDHsTyWJofbjPBAizj7.tR6mcnygD6rxIt
1FDg21gocIZCvQ0hQU_XnBgKHEmCrKu82N5_nvfyk7RcWWquuNKYFzLX4wXGpVR7e71xCjLOdDIW
Cua0J._Etu0EZrfnJhxtb8owaEc5jO.xZr4lPZHfaZs0WnpL1ICJpgtyRhkWHVC2XzeU6eISpsBS
YZZArRipPnxlYTiw3hTiQK_rhZX6C33yYFB1Kdi7yehXpGHxsDFYbKw6cc_ixhHMHywZKqas9ZLJ
B75Rnkw3K9Wr5Ll2UrgUVwK.OfHzwOpUZtGYLUR4_z8JAsPWkRnbHEf6nbGoUIzOL40kHxOnAkDe
qYJhUCvYXXZyPE2KcypyeZwfb6BZUGoRX7OCHLnV.HgnIu7OcyEnGupLgknhz4nQGdoztmwt4vv.
VU5UWuUWelSpUrj97N.5o61NdAgbfTEWqxpH1U3fbUFKt9HRpEo1KP1u4fQ36y5WowtDAwsON1em
7SPA18uYDiPfyAmM_LdTZSChwLbLVoaTur2hZXO6egIAR8ZO8NGM0nKp5.2LqRbHxR0wsn0dl0WI
zAx2q0ufMS_OaKCrrGHB7SGKLsdJrVqBklHp6WTMm6gZpXH6p4ortcKvjd6mp5783OrwdjapKPUx
90NzniF6MSaYLexgP8ZJs9RLozSgnS1VULbC7N9FBJHB_L.fzWHdW8RIaCsTEfK7jIZUV0ECMd7u
kfmCiEN4fkG8x_AZfV1Sq.KskHmcqdzc0qk8Tz1LVnPx3d8X31kVigzRiQ4mYzn_NuE4cSUBEAgu
wqGtuVsAQNbFa1mVwCRymJ0I89HlaJ92ePWVOIsv5XsqQ5_oqbHcekgnapXKUSQvIikdTK1dtAkd
wX6Z2WtTCAym3_TvTqf3Ab27eNPMMA_WNICrrsP5G.F1NJdCnkGyWF4URWPM_kzRpMV_5Fjn3dy2
WLAuFpkxB_Rv4OMDG_slmB1tyQOwH4zF.Kzo8fqU-
X-Sonic-MF: <m_a_n_j_u_s_k@yahoo.com>
X-Sonic-ID: d44570e0-8f47-445d-8d93-f8540e571702
In-Reply-To: <202403221927.42MJRNx0002777@hedwig.cmf.nrl.navy.mil>
X-Mailer: WebService/1.1.22205 YahooMailAndroidMobile
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b:0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: BN2PEPF000044A6:EE_|LV8PR01MB8678:EE_
X-MS-Office365-Filtering-Correlation-Id: af9e6a1c-63e0-4cc0-bf12-08dc4c0148cc
X-LD-Processed: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b,ExtAddr
X-MS-Exchange-AtpMessageProperties: SA
X-MS-Exchange-SenderADCheck: 0
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: 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
X-Forefront-Antispam-Report: CIP:66.163.189.82; CTRY:US; LANG:en; SCL:1; SRV:;
IPV:NLI; SFV:NSPM; H:sonic306-20.consmr.mail.ne1.yahoo.com;
PTR:sonic306-20.consmr.mail.ne1.yahoo.com; CAT:NONE;
SFS:(13230031)(376005)(48200799009)(61400799018); DIR:OUT; SFP:1102;
X-ExternalRecipientOutboundConnectors: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b
X-Auto-Response-Suppress: DR, OOF, AutoReply
X-OriginatorOrg: mitprod.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 24 Mar 2024 12:52:37.8105 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: af9e6a1c-63e0-4cc0-bf12-08dc4c0148cc
X-MS-Exchange-CrossTenant-Id: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b
X-MS-Exchange-CrossTenant-AuthSource: BN2PEPF000044A6.namprd04.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: LV8PR01MB8678
X-Content-Filtered-By: Mailman/MimeDel 2.1.34
X-BeenThere: kerberos@mit.edu
X-Mailman-Version: 2.1.34
Precedence: list
List-Id: The Kerberos Authentication System Mailing List <kerberos.mit.edu>
List-Unsubscribe: <https://mailman.mit.edu/mailman/options/kerberos>,
<mailto:kerberos-request@mit.edu?subject=unsubscribe>
List-Archive: <http://mailman.mit.edu/pipermail/kerberos/>
List-Post: <mailto:kerberos@mit.edu>
List-Help: <mailto:kerberos-request@mit.edu?subject=help>
List-Subscribe: <https://mailman.mit.edu/mailman/listinfo/kerberos>,
<mailto:kerberos-request@mit.edu?subject=subscribe>
X-Mailman-Original-Message-ID: <698375700.698118.1711284748728@mail.yahoo.com>
X-Mailman-Original-References: <628253825.301474.1711129798132.ref@mail.yahoo.com>
<628253825.301474.1711129798132@mail.yahoo.com>
<202403221927.42MJRNx0002777@hedwig.cmf.nrl.navy.mil>
 by: m_a_n_j_u_s_k@yahoo. - Sun, 24 Mar 2024 12:52 UTC

Thanks Ken, I'm getting the token every time I communicate with the proxy. I was wondering if the token could be reused so that I could optimize code.  Thanks for the clarification .

Yahoo Mail: Search, organise, conquer
On Fri, 22 Mar 2024 at 7:27 pm, Ken Hornstein<kenh@cmf.nrl.navy.mil> wrote: >Hi, I have an application that authenticates against a Proxy server
>which user Kerberos authentication scheme.  My application is using SSPI
>library (github/alexbrainman/sspi Golang package to be exact) generate
>a kerberos token and this token is passed to the Proxy server through
>Proxy-Authorization header "Proxy-Authorization: Negotiate <kerberos
>token>" My query, for the subsequent calls to the proxy do I need to
>regenerate this key or can I reuse the one generated the first time ?
>Or is it that each call to the proxy is treated as a session and that
>Kerberos token is for that session only ?

As a general rule, GSSAPI tokens (which in the specific case of Kerberos
contain AP-REQ/AP-REP messages) are supposed to be only used once;
they contain an expiration time in them and are supposed to be checked
for reuse on the server side (although that may not always happen
depending on implementation details).  You should always get a new
one by calling the appropriate APIs.  Note that assuming your client
is using a standard ticket cache only the first request will require
contacting the KDC.

--Ken

1
server_pubkey.txt

rocksolid light 0.9.8
clearnet tor