Re: Use ssh key to acquire TGT?

2007-06-02 Thread Adam Megacz
Christopher D. Clausen [EMAIL PROTECTED] writes: UIUC has AFS? Is there some other UIUC that I don't know about? Hrm, I was going by the fact that ncsa.uiuc.edu and acm.uiuc.edu are both in the CellServDB that comes with OpenAFS (and appear to work), but I guess those might be sub-campus-level

Re: Use ssh key to acquire TGT?

2007-06-02 Thread Adam Megacz
Jeffrey Altman [EMAIL PROTECTED] writes: Hrm, last I checked there was no RFC, just an internet-draft. RFC 4456 http://www.ietf.org/rfc/rfc4556.txt Wow, sweet. What is the implementation status in current KDC's (MIT and Heimdal)? Currently my thinking is to patch pam_krb5 and add a flag

Re: Use ssh key to acquire TGT?

2007-06-02 Thread Russ Allbery
Adam Megacz [EMAIL PROTECTED] writes: Christopher D. Clausen [EMAIL PROTECTED] writes: UIUC has AFS? Is there some other UIUC that I don't know about? Hrm, I was going by the fact that ncsa.uiuc.edu and acm.uiuc.edu are both in the CellServDB that comes with OpenAFS (and appear to work),

Re: Use ssh key to acquire TGT?

2007-06-02 Thread Russ Allbery
Adam Megacz [EMAIL PROTECTED] writes: Jeffrey Altman [EMAIL PROTECTED] writes: Hrm, last I checked there was no RFC, just an internet-draft. RFC 4456 http://www.ietf.org/rfc/rfc4556.txt Wow, sweet. What is the implementation status in current KDC's (MIT and Heimdal)? Heimdal supports

Re: Use ssh key to acquire TGT?

2007-06-02 Thread Ken Hornstein
How many of those keys belong to administratively independent organizations (ie if your home realm is part of .mil, how many of those keys are for civilian organizations?) There are a few ones that are ambiguous, but the highest number of .mil related cross-realm keys are 12, which leaves 8 that

Re: Use ssh key to acquire TGT?

2007-06-02 Thread Christopher D. Clausen
Russ Allbery [EMAIL PROTECTED] wrote: Adam Megacz [EMAIL PROTECTED] writes: Christopher D. Clausen [EMAIL PROTECTED] writes: UIUC has AFS? Is there some other UIUC that I don't know about? Hrm, I was going by the fact that ncsa.uiuc.edu and acm.uiuc.edu are both in the CellServDB that comes