How does the user principal know the service

2018-06-23 Thread ZongtianHou
Hi, everyone: I am a bit confused of the auth process of kerberos. The user principal request the AS for a tgt, then use send the tgt to the TGS to get a ticket. The ticket was encrypted by the service principal key, But how does the TGS know which service principal the user want to access, how

Re: How does the user principal know the service

2018-06-23 Thread Chris Hecker
You ask for a ticket for a specific service in the request. Chris On Sat, Jun 23, 2018 at 14:02 ZongtianHou wrote: > Hi, everyone: > I am a bit confused of the auth process of kerberos. The user principal > request the AS for a tgt, then use send the tgt to the TGS to get a ticket. > The ticket

Why the SPN can't be arbitrary

2018-06-23 Thread ZongtianHou
Hello, everyone: I have some questions for the auth process. When the user get the tgt, it then send a request to the TGS in which it tell TGS the service principal it want to access. I have two questions here. First, how does the user know the service principal, I think it only know the service

How list the principals in keytab on MAC

2018-06-23 Thread ZongtianHou
Hi, everyone It seems the kutils tools are different between the MAC and linux, and I can’t find how to use it in Mac OS in the internet. Does anyone know how to display the principals in a keytab and how to kinit a specific principal on Mac? Kerbe