Authentication Indicator in Kerberos Tickets, March 2017
- File formats:
- PROPOSED STANDARD
- RFC 4120
- A. Jain
- kitten (sec)
Discuss this RFC: Send questions or comments to firstname.lastname@example.org
This document updates RFC 4120, as it specifies an extension in the Kerberos protocol. It defines a new authorization data type, AD-AUTHENTICATION-INDICATOR. The purpose of introducing this data type is to include an indicator of the strength of a client's authentication in service tickets so that application services can use it as an input into policy decisions.
For the definition of Status, see RFC 2026.
For the definition of Stream, see RFC 4844.