[SSSD] GSSAPI and Kerberos - understanding question

Ondrej Valousek webserv at s3group.cz
Mon Nov 28 16:54:52 UTC 2011


> It's an artificial distinction that holds ground only in MS-land.
>
> If you find the Technet article can you send the link to this list ?
>
> It would be nice to have a reference in the archives.
>
> Simo.
>
I do not think so - see my post earlier today. I think it actually makes a sense in terms of improved security. You can tell your KDC which 
TGS tickets can be issued for a specified machine.
I good article is here:
http://technet.microsoft.com/en-us/library/cc755804%28WS.10%29.aspx
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20111128/beeb20ec/attachment.html>


More information about the sssd-devel mailing list