|
cosign-discuss at umich.edu |
| general discussion of cosign development and deployment | |
Hi Kevin, Thanks for the reply on the hardware and all, very helpful. CoSign and Kerberos question. When an application requests a Kerberos ticket (the RETRIEVE command to cosignd) it appears to be allowed to specify the ticket name (eg imap/imap.auckland.ac.nz@xxxxxxxxxxxxxx). This looks to be a service account (in the examples I have seen), does this mean that a service ticket is passed back to the application, and not a/the TGT the cosign CGI obtained to authenticate the user? Cheers Brett ------------ Brett Lomas Integration Architect Information Technology Systems and Services The University of Auckland New Zealand Phone: +64 9 373 599 extn 86499 Mobile: +64 21 757 096
<<attachment: winmail.dat>>