This page (revision-1) was last changed on 29-Nov-2024 16:16 by UnknownAuthor

Only authorized users are allowed to rename pages.

Only authorized users are allowed to delete pages.

Page revision history

Version Date Modified Size Author Changes ... Change note

Page References

Incoming links Outgoing links
AS_REQ
AS_REQ

Version management

Difference between version and

At line 1 added 18 lines
!!! Overview
[{$pagename}] represents the [client] [request] within the [AS Exchange]
[{$pagename}] is the initial [authentication] [request], the [Kerberos] [client] ([kinit]) asks the [KDC] (more specifically the [Kerberos Authentication Service]) for a [Ticket Granting Ticket]. The request is completely [Plaintext] and looks like this:
\\
AS_REQ = ( [PrincipalClient|UserPrincipalName] , [PrincipalService|ServicePrincipalName] , IP_list , Lifetime )
\\
IP_list may also be [null]. In this case the corresponding ticket can be used by any machine. This resolves the problem of those [Kerberos] [clients] under [NAT], since their request would arrive at the service with a source address different from that of the requesting user, but the same as the router making the [NAT].
Instead, in the case of machines with more than one network card, IP_list should contain the [IP address]es of all the cards: in fact it would be difficult to predict beforehand with which connection the server which provides the service would be contacted.
!! More Information
There might be more information for this subject on one of the following:
[{ReferringPagesPlugin before='*' after='\n' }]
----
* [#1] - [Kerberos Operation|https://zeroshell.org/kerberos/kerberos-operation/|target='_blank'] - based on information obtained 2018-05-16
This page (revision-1) was last changed on 29-Nov-2024 16:16 by UnknownAuthorTop