Difference between revisions of "Projects/IAKERB"
From K5Wiki
< Projects
(→Background) |
(→Status) |
||
| Line 20: | Line 20: | ||
==Status== |
==Status== |
||
| − | Code is in the [http://src.mit.edu/fisheye/browse/krb5/users/lhoward/iakerb users/lhoward/iakerb branch]. |
+ | Code is in the [http://src.mit.edu/fisheye/browse/krb5/users/lhoward/iakerb users/lhoward/iakerb-refonly branch]. |
Revision as of 12:58, 17 November 2009
This is an early stage project for MIT Kerberos. It is being fleshed out by its proponents. Feel free to help flesh out the details of this project. After the project is ready, it will be presented for review and approval.
Background
Implement IAKERB. IAKERB is a protocol for proxying KDC exchanges via GSS-API.
Note: the implementation requires the KDC to support referrals to work in cross-realm environments. Making the non-referral cross-realm heuristics asynchronous will be a considerable amount of work. Most modern KDCs support referrals.
Architecture
Implementation
libkrb5
GSS
Open issues
Status
Code is in the users/lhoward/iakerb-refonly branch.
