On Wed, Nov 23, 2016 at 7:17 AM, Alexander Bokovoy <abokovoy(a)redhat.com> wrote:
Heimdal does not support MS-KKDCP spec, so you are left with direct
Kerberos communication over port 88/tcp or 88/udp, but these are enabled
in Fedora infrastructure, yes.
I thought direct Kerberos service was going to be disabled, to prevent
attackers sniffing and brute-forcing the encrypted preauth timestamp?
- Ken