A New Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the Common Authentication Technology Next Generation of the IETF.
Title : Initial and Pass Through Authentication Using Kerberos V5 and the GSS- API (IAKERB)
Authors : Benjamin Kaduk
Filename : draft-ietf-kitten-iakerb-03.txt
Pages : 13
Date : 2017-03-30
This document defines extensions to the Kerberos protocol and the
GSS-API Kerberos mechanism that enable a GSS-API Kerberos client to
exchange messages with the KDC by using the GSS-API acceptor as a
proxy, encapsulating the Kerberos messages inside GSS-API tokens.
With these extensions a client can obtain Kerberos tickets for
services where the KDC is not accessible to the client, but is
accessible to the application server.