|
cosign-discuss at umich.edu
|
general discussion of cosign development and deployment
|
|
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Kerberos Tickets
Hi Kevin,
Thanks for the reply on the hardware and all, very helpful.
CoSign and Kerberos question. When an application requests a Kerberos ticket
(the RETRIEVE command to cosignd) it appears to be allowed to specify the
ticket name (eg imap/imap.auckland.ac.nz@xxxxxxxxxxxxxx). This looks to be a
service account (in the examples I have seen), does this mean that a service
ticket is passed back to the application, and not a/the TGT the cosign CGI
obtained to authenticate the user?
Cheers
Brett
------------
Brett Lomas
Integration Architect
Information Technology Systems and Services
The University of Auckland
New Zealand
Phone: +64 9 373 599 extn 86499
Mobile: +64 21 757 096
<<attachment: winmail.dat>>
|