Subject: [Ietf-krb-wg] Fwd: [abfab] FYI: New draft for Kerberos pre-authentication based on EAP-GSS

From: Alejandro Perez Mendez <[email-masked]>
Date: Thu, 16 Jun 2011 09:27:43 +0200

Dear all,

we submitted a few days ago a new draft to the ABFAB WG with a proposal 
for Kerberos pre-authentication based on the GSS-EAP mechanism. We think 
that this proposal may be also of interest for the KRB WG, since it can 
be considered as an alternative to the cross-realm operation. This 
proposal also contains details about authorization, though they can be 
easily omitted if not relevant for the required deployment.

Best regards,
Alejandro

>A New Internet-Draft is available from the on-line Internet-Drafts
>directories.
>
>	Title           : GSS-EAP pre-authentication for Kerberos
>	Author(s)       : Alejandro Perez-Mendez
>                             Rafa Marin-Lopez
>                             Fernando Pereniguez-Garcia
>                             Gabriel Lopez-Millan
>	Filename        : draft-perez-abfab-eap-gss-preauth-00.txt
>	Pages           : 14
>	Date            : 2011-06-14
>
>      This draft defines an alternative to the standard cross-realm
>      operation in Kerberos, to allow users from an organization can obtain
>      a TGT from the KDC of a different one, both belonging to the same
>      AAA-based federation.  This proposal makes use of the GSS-API pre-
>      authentication for Kerberos and the GSS-API Mechanism for the
>      Extensible Authentication Protocol to carry out the required
>      functionality.
>
>
>A URL for this Internet-Draft is:
>http://www.ietf.org/internet-drafts/draft-perez-abfab-eap-gss-preauth-00.t
>xt
>
>Internet-Drafts are also available by anonymous FTP at:
>ftp://ftp.ietf.org/internet-drafts/
>
>This Internet-Draft can be retrieved at:
>ftp://ftp.ietf.org/internet-drafts/draft-perez-abfab-eap-gss-preauth-00.tx
>t

_______________________________________________
abfab mailing list
[email-masked]
https://www.ietf.org/mailman/listinfo/abfab

_______________________________________________
ietf-krb-wg mailing list
[email-masked]
https://lists.anl.gov/mailman/listinfo/ietf-krb-wg