[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: alternative to user-to-user Kerberos in KINK

To: "Medvinsky, Sasha (SD-EX)" <SMedvinsky@xxxxxx>
Subject: Re: alternative to user-to-user Kerberos in KINK
From: Ken Hornstein <kenh@xxxxxxxxxxxxxxxx>
Date: Mon, 13 Nov 2000 15:22:48 -0500
Cc: "'ietf-kink@xxxxxxxx'" <ietf-kink@xxxxxxxx>
In-reply-to: Your message of "Mon, 13 Nov 2000 13:34:29 EST." <>
List-archive: <http://www.vpnc.org/ietf-kink/mail-archive/>
List-id: <ietf-kink.vpnc.org>
List-unsubscribe: <mailto:ietf-kink-request@vpnc.org?body=unsubscribe>
Sender: owner-ietf-kink@xxxxxxxxxxxxx

>I was talking about a Kerberized service, not a KDC.  This is a Kerberized
>service that accepts AP Requests and responds with AP Replies.  I was
>proposing that a Kerberized service is able to initiate Kerberized key
>management without the need to obtain (U2U) tickets for its clients.

Ah, okay, I understand now.

FWIW, I prefer the term "application servers" to minimize confusion between
the KDC and other servers.

--Ken

References:
- RE: alternative to user-to-user Kerberos in KINK
  - From: Medvinsky, Sasha (SD-EX)

Prev by Date: RE: alternative to user-to-user Kerberos in KINK
Next by Date: RE: alternative to user-to-user Kerberos in KINK
Previous by thread: RE: alternative to user-to-user Kerberos in KINK
Next by thread: RE: alternative to user-to-user Kerberos in KINK
Index(es):
- Date
- Thread