Kerberos Principal Name Canonicalization and Cross-Realm Referrals

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 19
Abstract: This memo documents a method for a Kerberos Key Distribution Center (KDC) to respond to client requests for Kerberos tickets when the client does not have detailed configuration information on the realms of users or services. The KDC will handle requests for principals in other realms by returning either a referral error or a cross-realm Ticket-Granting Ticket (TGT) to another realm on the referral path. The clients will use this referral information to reach the realm of the target principal and then receive the ticket. This memo also provides a mechanism for verifying that a request has not been tampered with in transit. This memo updates RFC 4120. [STANDARDS-TRACK]
Publication Date: 2012-11-01
Status Note: Proposed Standard
DOI: 10.17487/RFC6806
Link: https://doi.org/10.17487/RFC6806
Author(s): Sam Hartman
Kenneth Raeburn
Larry Zhu
Keyword(s): Authentication, Security Protocols, Media Identity

Latest version of IETF RFC 6806

Document Versions — IETF RFC 6806

▶ IETF RFC 6806 (2012-11-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

IETF RFC 2119 [Active*]
IETF RFC 4120 [Active*]
IETF RFC 6113 [Active*]

Bibliographic Reference(s)

Trostle, J., Kosinovsky, I., and M. Swift, "Implementation of Crossrealm Referral Handling in the MIT Kerberos Client", Network and Distributed System Security Symposium, February 2001. EXTERNAL
IETF RFC 4556 [Active*]
IETF RFC 5280 [Active, Amended*]
IETF RFC 5322 [Active, Amended*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC6806.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 6806, Kerberos Principal Name Canonicalization and Cross-Realm Referrals. Available at https://doi.org/10.17487/RFC6806

Snippet:

IETF RFC 6806, Kerberos Principal Name Canonicalization and Cross-Realm Referrals. Available at https://doi.org/10.17487/RFC6806

HTML (ISO 690 compliant)

Preview:

IETF RFC 6806, Kerberos Principal Name Canonicalization and Cross-Realm Referrals. Available at https://doi.org/10.17487/RFC6806

Snippet:

<span class="citation"><cite>IETF RFC 6806</cite>, Kerberos Principal Name Canonicalization and Cross-Realm Referrals. Available at <a href="https://doi.org/10.17487/RFC6806" target="_blank" rel="noopener">https://doi.org/10.17487/RFC6806</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 6806, Kerberos Principal Name Canonicalization and Cross-Realm Referrals
doi: 10.17487/RFC6806
url: https://doi.org/10.17487/RFC6806

Snippet:

<li>
<cite id="bib-rfc6806">IETF RFC 6806</cite>, Kerberos Principal Name Canonicalization and Cross-Realm Referrals
<span class="doi">10.17487/RFC6806</span>
</li>