Kerberos pre-auth works it (the KDC) requests an encrypted timestamp before sending credentials. If your radius server has a host/fqdn entry in /etc/krb5.keyatb it will just work. You probably want hardware pre-auth and I don't know about that one. You could ask kerberos@mit.edu
On Fri, 2005-07-01 at 07:57, Roy D. Hockett wrote: > I ahve looked on the web and haven't found anything afirming that > freeradius will support or not support preauth with kerberos v5. > Is anyone using preauth with kerberos v5 and freeradius? If there is > documentation on this please point me in the right direction. > > Thanks, > -Roy - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html