[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: multiple tgt's

To: heimdal-discuss@sics.se, Jon Wilson <lists@erentil.net>
Subject: Re: multiple tgt's
From: "Brandon S. Allbery KF8NH" <allbery@ece.cmu.edu>
Date: Sat, 26 Apr 2008 09:56:47 -0400
In-Reply-To: <48129A6B.5010704@erentil.net>
List-Archive: <http://list.sics.se/sympa/arc/heimdal-discuss>
List-Help: <mailto:sympa@sics.se?subject=help>
List-Id: <heimdal-discuss.sics.se>
List-Owner: <mailto:heimdal-discuss-request@sics.se>
List-Post: <mailto:heimdal-discuss@sics.se>
List-Subscribe: <mailto:sympa@sics.se?subject=subscribe%20heimdal-discuss>
List-Unsubscribe: <mailto:sympa@sics.se?subject=unsubscribe%20heimdal-discuss>
References: <48129A6B.5010704@erentil.net>
Reply-To: heimdal-discuss@sics.se, "Brandon S. Allbery KF8NH" <allbery@ece.cmu.edu>


On Apr 25, 2008, at 22:58 , Jon Wilson wrote:

> Is there a way with kinit/pkinit to allow multiple tgt's at the  
> same time?
>
> ie, a klist would show:
>
> krbtgt/REALM.COM@REALM.COM for bob@REALM.COM
> krbtgt/REALM.NET@REALM.NET for bob@REALM.NET

In theory it could be done.  In practice, choosing which one to use  
can be nontrivial when e.g. doing crossrealm auth, so both Heimdal  
and MIT Kerberos punt and only support one TGT.

-- 
brandon s. allbery [solaris,freebsd,perl,pugs,haskell] allbery@kf8nh.com
system administrator [openafs,heimdal,too many hats] allbery@ece.cmu.edu
electrical and computer engineering, carnegie mellon university    KF8NH

References:
- multiple tgt's
  - From: Jon Wilson <lists@erentil.net>

Prev by Date: multiple tgt's
Next by Date: Re: multiple tgt's
Prev by thread: multiple tgt's
Next by thread: Re: multiple tgt's
Index(es):
- Date
- Thread