Re-authentication vs Renewal of credentials by a service and the impact to clients

2016-05-12 Thread Todd Grayson
Hello, When a service re-authenticates to the KDC, effectively getting a new TGT, are the service tickets related to previous instance of the TGT for that service, no longer valid? That is, does a service re-authenticating to a KDC, rather than renewing, cause all the current related service tick

Re: Re-authentication vs Renewal of credentials by a service and the impact to clients

2016-05-12 Thread Greg Hudson
On 05/12/2016 09:48 AM, Todd Grayson wrote: > When a service re-authenticates to the KDC, effectively getting a new TGT, > are the service tickets related to previous instance of the TGT for that > service, no longer valid? No and yes. From a protocol perspective, service tickets remain valid unt

IPv6 support in KDC

2016-05-12 Thread Jim Shi
Hi, does KDC support IPv6? which versions of KDC have the support? Thank you very much. Jim Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos

Re: IPv6 support in KDC

2016-05-12 Thread Robbie Harwood
Jim Shi writes: > Hi, does KDC support IPv6? Yes. > which versions of KDC have the support? Definitely everything after 1.12; I believe 1.10 and 1.11 should as well. Older than that I do not know. signature.asc Description: PGP signature Kerb

Re: IPv6 support in KDC

2016-05-12 Thread Greg Hudson
On 05/12/2016 06:21 PM, Jim Shi wrote: > Hi, does KDC support IPv6? which versions of KDC have the support? Per http://k5wiki.kerberos.org/wiki/IPv6, we have supported IPv6 in the KDC since 1.3, but only since 1.9 in kadmind. Kerberos mailing list