Re: Snapshot of monthly KDC traffic for stanford.edu

2010-04-01 Thread Mark Sirota
verification by getting a TGT and then failing to complete the process by trying to use it for something. I know we found one popular Java library that does that. -- Mark Sirota, Associate Director, Network Engineering and Services University of Pennsylvania, Information Systems and Computing msir

Re: X.509 Interop

2005-11-17 Thread Mark Sirota
--On November 17, 2005 6:49:22 AM + Jeffrey Altman [EMAIL PROTECTED] wrote: The CITI group at UMichigan also has a project that allows you to use a Kerberos service ticket to obtain an X.509 certificate with the same lifetime as the Kerberos ticket. Assuming I'm thinking of the same

Re: X.509 Interop

2005-11-17 Thread Mark Sirota
--On November 17, 2005 11:05:31 AM -0600 Douglas E. Engert [EMAIL PROTECTED] wrote: There is browser support! Along with the UMich Kx509 that works with the IE there is the kpkcs11 for all the others browsers. This implements a PKCS11 Security device plugin, and it works on Unix or Windows with

Re: Kerberos support in Thunderbird

2005-09-11 Thread Mark Sirota
(and it's GSSAPI library) used instead of Microsoft's sspi. This line: user_pref(network.auth.use-sspi, false); Needs to be put into a user's prefs.js in their user profile dir, or use options | advanced | config to change the pref. Mark -- Mark Sirota, Associate Director, Network Engineering