For Kerberos on a firewall would i have to have both inbound and
outbound allowed. Or will it just work with outbound?
Thanks
Miki
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
How can I get detailing about your Product line ... ?
Dr. Wong
Kerberos mailing list [EMAIL PROTECTED]
http://mailman.mit.edu/mailman/listinfo/kerberos
Mikiala Malabon wrote:
> For Kerberos on a firewall would i have to have both inbound and
> outbound allowed. Or will it just work with outbound?
>
> Thanks
> Miki
If you want clients inside the firewall to be able to contact KDCs
outside the firewall, you need to open outbound.
If you want cli
Greg,
We've a keytab file (test.keytab) with keytab entries of the form shown
below pointing to a Windows host joined to a AD domain (DOMAINNAME.COM)
KVNO Timestamp Principal
-
1 11/21/14 14:25:56 host/hostna
Hi All,
I have a quick question please..
Can we configure kerberos using AES256 and SHA2?
If yes, can you please provide me some documentation or links so that I can try
it out?
Thanks,
Prashanth
Kerberos mailing list Kerberos
Hey,
You cannot mix any set of algorithms you want, but you need a predefined
encryption type. Compare it to TLS' ciphersuites if you like.
`
The standardised list is available on
http://www.iana.org/assignments/kerberos-parameters/kerberos-parameters.xhtml
The closest to what you are asking is
Hi Rick,
Thank you so much for quick reply.
I'll go through it now.
Thanks,
Prashanth
-Original Message-
From: kerberos-boun...@mit.edu [mailto:kerberos-boun...@mit.edu] On Behalf Of
Rick van Rein
Sent: Thursday, February 25, 2016 7:33 PM
To: kerberos@mit.edu
Subject: Re:
OK,
Also note that the hash is not SHA1 but HMAC-SHA1, which is much stronger. I
didn't make that clear before.
-Rick
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
Yep. Got it!
Thanks,
Prashanth
-Original Message-
From: Rick van Rein [mailto:r...@openfortress.nl]
Sent: Thursday, February 25, 2016 7:50 PM
To: Prashanth Marampally
Cc: kerberos@mit.edu
Subject: Re: Quick question related to Kerberos + AES256 + SHA2
OK,
Also note that the hash is
h Marampally
> Cc: kerberos@mit.edu
> Subject: Re: Quick question related to Kerberos + AES256 + SHA2
>
> OK,
>
> Also note that the hash is not SHA1 but HMAC-SHA1, which is much stronger. I
> didn't make that clear before.
>
> -Rick
>
> ___
; kerberos@mit.edu
Subject: Re: Quick question related to Kerberos + AES256 + SHA2
Not that the Kitten WG is working on standardizing new enctypes for AES
+HMAC-SHA2, this is the latest draft:
https://tools.ietf.org/html/draft-ietf-kitten-aes-cts-hmac-sha2-09
Although it will take a while before all
> Thanks,
> > Prashanth
> >
> > -Original Message-
> > From: Rick van Rein [mailto:r...@openfortress.nl]
> > Sent: Thursday, February 25, 2016 7:50 PM
> > To: Prashanth Marampally
> > Cc: kerberos@mit.edu
> > Subject: Re: Quick question related t
;> On Thu, 2016-02-25 at 14:22 +, Prashanth Marampally wrote:
>> > Yep. Got it!
>> >
>> > Thanks,
>> > Prashanth
>> >
>> > -Original Message-
>> > From: Rick van Rein [mailto:r...@openfortress.nl]
>> > Sent: Thurs
13 matches
Mail list logo