logo_kerberos.gif

Difference between revisions of "Projects/IAKERB"

From K5Wiki
Jump to: navigation, search
(Background)
(Background)
Line 5: Line 5:
 
==Background==
 
==Background==
   
Implement IAKERB. At this stage, the plan is to implement AS-REQ IAKERB initiators only, so an initiating client will need to be in the same realm as the service and will not get a TGT. Third-party IAKERB initiators can acquire TGTs, however.
 
  +
Implement [http://tools.ietf.org/html/draft-zhu-ws-kerb-03 IAKERB].
  +
 
At this stage, the plan is to implement AS-REQ IAKERB initiators only, so an initiating client will need to be in the same realm as the service and will not get a TGT. Third-party IAKERB initiators can acquire TGTs, however.
   
 
==Architecture==
 
==Architecture==

Revision as of 15:36, 14 November 2009

This is an early stage project for MIT Kerberos. It is being fleshed out by its proponents. Feel free to help flesh out the details of this project. After the project is ready, it will be presented for review and approval.



Background

Implement IAKERB.

At this stage, the plan is to implement AS-REQ IAKERB initiators only, so an initiating client will need to be in the same realm as the service and will not get a TGT. Third-party IAKERB initiators can acquire TGTs, however.

Architecture

Implementation

libkrb5

GSS

Open issues

Status

Code is in the users/lhoward/iakerb branch.