Andrew Ortlieb wrote:
> I have been facing this same issue for over a week.  It's been entirely
> frustrating.
>
>  
>
> While watching network traffic I'm seeing that mod_auth_kerb isn't even
> attempting to communicate with the domain controller while attempting to
> negotiate. 
In a kerberos authentication, the service does not communicate with the
KDC.  The service
already knows its private key necessary to decrypt the blob given by the
KDC to the client
for delivery to the service.

Even the client will not communicate with the KDC if it already has a
valid service ticket for
the service it is attempting to authenticate to.


Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

________________________________________________
Kerberos mailing list           [email protected]
https://mailman.mit.edu/mailman/listinfo/kerberos

Reply via email to