Acquiring a client principal, and acquiring a service ticket for the target service can be performed by the client, without sending messages across the non-existent wire. Performing these checks in mongokerberos will let us ensure that the client's keys can be used to obtain service tickets.
Relevant RFCs:
- depends on
-
SERVER-44108 Check rdns setting in kerberos client profile and optionally dump complete profile
-
- Closed
-