COmanage Developers List

[Heather Flanagan <>]

(This is mostly for Scott; not sure if you are still looking at the
moonshot project)


-------- Original Message --------
Subject: [tf-emc2] FW: KDC as a moonshot acceptor
Date: Tue, 11 Sep 2012 14:23:33 +0000
From: Josh Howlett 
<>
To: TF-EMC2 
<>,
 
""
<>

FYI -- a major step towards the integration of the most widely deployed
security technologies, thanks to our colleagues at the University of
Murcia.

Josh.

On 11/09/2012 11:20, "Alejandro Perez Mendez" 
<>
 wrote:

>Dear all,
>
>I'm glad to announce that there is a implementation of
>draft-perez-krb-wg-gss-preauth-02.txt available for download at
>https://github.com/alejandro-perez/krb5.git (you have to use the branch
>called "gsspreauth"). A README.txt file will be available soon in
>src/plugins/preauth/gssapi/ to explain some configuration and usage
>details.
>
>Using this implementation, the KDC is able to perform client
>pre-authentication using Moonshot technology, even for federated users
>(where no previous state for the user is available on the KDC's
>database). In this way, already deployed kerberized services within the
>federation are made accessible to members of the AAA federation without
>requiring any modification, just by enabling GSS preauth on the KDC.
>
>I'd like to thank Rhys Smith, Nico Williams and Luke Howard for their
>priceless support and help.
>
>Best regards,
>Alejandro


Janet is a trading name of The JNT Association, a company limited
by guarantee which is registered in England under No. 2881024
and whose Registered Office is at Lumen House, Library Avenue,
Harwell Oxford, Didcot, Oxfordshire. OX11 0SG