%% You should probably cite draft-ietf-kitten-iakerb instead of this I-D. @techreport{ietf-krb-wg-iakerb-02, number = {draft-ietf-krb-wg-iakerb-02}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-ietf-krb-wg-iakerb/02/}, author = {Larry Zhu and Jeffrey E. Altman}, title = {{Initial and Pass Through Authentication Using Kerberos V5 and the GSS- API (IAKERB)}}, pagetotal = 10, year = 2009, month = jul, day = 30, abstract = {This document defines extensions to the Kerberos protocol and the GSS-API Kerberos mechanism that enable a GSS-API Kerberos client to exchange messages with the KDC using the GSS-API acceptor as the proxy, by encapsulating the Kerberos messages inside GSS-API tokens. With these extensions a client can obtain Kerberos tickets for services where the KDC is not accessible to the client, but is accessible to the application server.}, }