4 ms·
No Kerberos won't help in this case. Once you have the keytab you can impersonate the client. Kerberos doesn't solve the "trusted client" issue.
by vicaya 14y ago
No Kerberos won't help in this case. Once you have the keytab you can impersonate the client. Kerberos doesn't solve the "trusted client" issue.
- Spooky23 14y agoIt doesn't help in the Twitter client use case, but it will help in the user/password compromise scenario described in the parent comment. If I compromise the keytab, I can impersonate the domain member server and presumably the active tickets... but the username/password is on the KDC/DC.