Information on how to get kerberos ticket of the user in VFS/shell during conneciton
manfred.furuholmen at gmail.com
Sat Feb 24 17:41:44 UTC 2018
Ok thanks , I will check if we have money to engage the support.
On Fri, Feb 23, 2018 at 8:41 AM, Volker Lendecke <Volker.Lendecke at sernet.de>
> On Thu, Feb 22, 2018 at 09:41:20PM +0100, Manfred Furuholmen via
> samba-technical wrote:
> > the conversion is done by the aklog, you can find it in the src/aklog
> > directory in openAFS.
> > That is possible because it was implemented the 2b token, mainly
> kerberos 5
> > in rxkad.
> > The aklog is able to do several conversions, for the krb5 there is a
> > function call rxkad_build_native_token
> > that is possible because it was implemented the 2b token in AFS , mainly
> > kerberos 5 in rxkad, the trick was to use kerberos 5 EncTicketPart
> > of kerberos 4 ditto.
> Ok, this means we have a chance.
> I think some developer needs to spend a few days on this. You should
> contact someone from https://www.samba.org/samba/support/ for paid
> support, as I don't think anybody will be able to find time for this
> in spare time.
> Regards, Volker Lendecke
> Besuchen Sie die verinice.XP 2018 in Berlin,
> Anwenderkonferenz für Informationssicherheit
> vom 21.-23.03.2018 im Sofitel Kurfürstendamm
> Info & Anmeldung hier: http://veriniceXP.org
> SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
> phone: +49-551-370000-0, fax: +49-551-370000-9
> AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
> http://www.sernet.de, mailto:kontakt at sernet.de
More information about the samba-technical