Received: from PACIFIC-CARRIER-ANNEX.MIT.EDU by po7.MIT.EDU (5.61/4.7) id AA13870; Tue, 5 Dec 95 08:47:18 EST Received: from cebaf1.cebaf.gov by MIT.EDU with SMTP id AA12519; Tue, 5 Dec 95 08:46:07 EST Received: from CEBAF.GOV by CEBAF.GOV (PMDF V5.0-5 #9103) id <01HYFWWPWPYO8WWDHS@CEBAF.GOV>; Tue, 05 Dec 1995 08:27:00 -0500 (EST) Date: Tue, 05 Dec 1995 08:26:59 -0500 (EST) From: PMDF Mail Server Subject: Undeliverable RFC822 mail: temporarily unable to deliver To: postmaster@CEBAF.GOV, owner-kerberos@MIT.EDU Message-Id: <01HYFWYPB0F28WWDHS@CEBAF.GOV> Mime-Version: 1.0 Content-Type: MULTIPART/MIXED; BOUNDARY="Boundary (ID XzX3dj4LJvVE3eip8jnmbA)" --Boundary (ID XzX3dj4LJvVE3eip8jnmbA) Content-type: TEXT/PLAIN; CHARSET=US-ASCII Your message could not be delivered to: fanl Your message has been enqueued and undeliverable for 2 hours. The mail system will continue to try to deliver your message for an additional 58 hours. --Boundary (ID XzX3dj4LJvVE3eip8jnmbA) Content-type: MESSAGE/SAMPLE Received: from MIT.EDU (PACIFIC-CARRIER-ANNEX.MIT.EDU) by CEBAF.GOV (PMDF V5.0-5 #9103) id <01HYFR6WSW348WWCYW@CEBAF.GOV> for fanl@CEBAF.GOV; Tue, 05 Dec 1995 05:41:48 -0500 (EST) Received: from pad-thai.cam.ov.com by MIT.EDU with SMTP id AA26661; Tue, 05 Dec 1995 04:07:08 -0500 (EST) Received: by pad-thai.cam.ov.com (8.6.12/) id ; Tue, 05 Dec 1995 04:10:54 -0500 Received: from GATEWAY by pad-thai.cam.ov.com with netnews for kerberos-wrapper@cam.ov.com (kerberos@mit.edu) Date: Mon, 04 Dec 1995 10:35:22 +0000 (GMT) From: aldini@zeus.csr.unibo.it (Alessandro Aldini mat.1193) Subject: Help about Kerberos (TGT request) Sender: usenet@cam.ov.com To: kerberos@MIT.EDU Message-id: <49uita$o5i@sirio.cineca.it> Organization: Cineca Content-transfer-encoding: 7BIT I read from "Firewalls and Internet Security" about the Kerberos Authentication System : Kerberos principals may obtain tickets for services from a special server known as the Ticket Granting Server (TGS). The client "speaks" to TGS with a private key and he obtains this key at session-start time from KDC (key distribution centre). The client makes a request to the KDC to obtain this key (and other information for the TGS) and the KDC reply with an encrypted messagge; the key used for this messagge is the client private key, so the KDC must know the private key of every user. The client key is derived from a noninvertible transform of the user's --Boundary (ID XzX3dj4LJvVE3eip8jnmbA)--