Re: Switch kerberos man pages to Docbook?

2014-10-14 Thread Russ Allbery
Lionel Cons writes: > Well, its custom from the viewpoint that none of the professional > localization tools support it. Its basically all handcrafted with no > way to facilitate translation and its painful to update. That's why > we'd like to propose a switch to docbook/xml... Sphinx supports g

Re: Switch kerberos man pages to Docbook?

2014-10-14 Thread Lionel Cons
On 24 September 2014 16:34, Greg Hudson wrote: > On 09/24/2014 06:54 AM, Lionel Cons wrote: >> Has anyone considered switching the source format for the kerberos man >> pages from the current custom format over to Docbook/XML? It would >> make tasks like translation (our main issue) or generation

Re: No mention of _kerberos TXT in RFCs / but we have DNSSEC now

2014-10-14 Thread Rick van Rein
Hi Greg, >> I’m finishing a TLS-with-krb5-and-DH proposal which relies on this record. >> Without it, there is no chance of knowing how to crossover to other realms >> (the mechanics of that being unsettled). I may now have to introduce these >> TXT records in that specification. > > Is thi

Re: No mention of _kerberos TXT in RFCs / but we have DNSSEC now

2014-10-14 Thread Greg Hudson
On 10/13/2014 07:57 AM, Rick van Rein wrote: > I’m finishing a TLS-with-krb5-and-DH proposal which relies on this record. > Without it, there is no chance of knowing how to crossover to other realms > (the mechanics of that being unsettled). I may now have to introduce these > TXT records in

Re: Question on Kerberos SSO with MS-PKCA (Microsoft's implementation of PKINIT) preauthentication

2014-10-14 Thread Benjamin Kaduk
On Tue, 14 Oct 2014, GK wrote: > > > http://msdn.microsoft.com/en-in/library/cc238455.aspx > > > > > > which clearly says this PKI based initial authentication is available with > MS-PKCA (Microsoft's implementation of PKINIT) > > then again it's a developer document and it gives only technical de

Question on Kerberos SSO with MS-PKCA (Microsoft's implementation of PKINIT) preauthentication

2014-10-14 Thread GK
I am working on enabling Kerberos based SSO (with PKI used for initial authentication) in our test environment. Domain controller is windows server 2008 R2, Access resources are few web applications hosted on (IIS of a server 2008 R2 machine) and Resource client is windows 7 machine, in which user