kerberos support ?

[Jouni Malinen]

On Wed, Mar 31, 2010 at 10:00:17PM +0900, ????? wrote:

> Does wpa_supplicant provide the Kerberos authentication protocol ?

Do you have any specific protocol or use case in mind for this as far as
IEEE 802.1X/EAPOL authentication is concerned? If you are thinking of
running Kerberos fully on the supplicant, I don't think there is any
complete solution available for wpa_supplicant at the moment, but it
may be possible to extend EAP-TLS to use Kerberos or add a new EAP
methods, etc.

If you can run Kerberos on another device and are fine with just using
Kerberos for authentication, you could also use something like EAP-TTLS
with PAP to get the clear-text password inside the tunnel to allow this
to be implemented without needed any changes in wpa_supplicant.

-- 
Jouni Malinen                                            PGP id EFC895FA