Revision Summary Date Revision History Revision Class Comments 12/16/2011 1.0 New Released new document. 3/30/2012 1.0 None No changes to the meaning, language, or formatting of the technical content. 7/12/2012 1.1 Minor Clarified the meaning of the technical content. 10/25/2012 1.1 None No changes to the meaning, language, or formatting of the technical content. 1/31/2013 1.2 Minor Clarified the meaning of the technical content. 8/8/2013 2.0 Major Significantly changed the technical content. 11/14/2013 2.1 Clarified the meaning of the technical content. 2/13/2014 3.0 Major Significantly changed the technical content. 5/15/2014 3.1 Minor Clarified the meaning of the technical content.
6/30/2015 4.0 Major Significantly changed the technical content. 10/16/2015 4.0 None No changes to the meaning, language, or formatting of the technical content. 7/14/2016 4.0 None No changes to the meaning, language, or formatting of the technical content. 6/1/2017 4.0 None No changes to the meaning, language, or formatting of the technical content. 9/15/2017 5.0 Major Significantly changed the technical content. 9/12/2018 6.0 Major Significantly changed the technical content.
Protocol Details Client Details This section describes details of protocol processing that must be understood in order to implement a client that can correctly perform its role in the protocol message exchange. Abstract Data Model This section describes a conceptual model of possible data organization that an implementation maintains to participate in this protocol. The described organization is provided to facilitate the explanation of how the protocol behaves. This document does not mandate that implementations adhere to this model as long as their external behavior is consistent with that described in this document. The KKDCP client has the following configuration setting: KKDCPServerURL: A string containing the URL of the KKDCP server. The following parameters are set when the client calls ProxyMessage(): KerberosMessage: A temporary variable that contains a Kerberos message. Error: A temporary variable that contains an error message or NULL. By default, it is set to NULL. TargetDomain: The field of the Kerberos message ( section 5.4.1). Timers None. Initialization As stated in section , the KKDCP client MUST be configured with the URL of the KKDCP server. Higher-Layer Triggered Events The KKDCP client is triggered when the client calls ProxyMessage() and when returns an error or data. Message Processing Events and Sequencing Rules ProxyMessage() Call Inputs: Input_kerb_message OCTET STRING Target_domain KERB-REALM - optional dclocator-hint INTEGER - optional Outputs: Output_kerb_message OCTET STRING
Index A Abstract data 9 10 6 C 6 20 Client 9 9 9 message processing 9 receiving KDC_PROXY_MESSAGE ( 10, 10) 10 9 sequencing rules 9 receiving KDC_PROXY_MESSAGE ( 10, 10) 10 9 D Data model - abstract 9 10 E Examples 13 15 F 6 G 4 H Higher-layer triggered events 9 11 I 18 18 5 Initialization 9 11 4 K 8 M Message processing client 9 receiving KDC_PROXY_MESSAGE ( 10, 10) server 11 11 Messages 8 8 8 8 8 N 8 5 O 13 15 local events 10 12 6 P 18 6 6 19 R 5 5 5 6 S Security 18 18 Sequencing client 9 receiving KDC_PROXY_MESSAGE ( 10, 10) server 11 11