@techreport{perez-abfab-kerberos-preauth-options-01,
    number =    {draft-perez-abfab-kerberos-preauth-options-01},
    type =      {Internet-Draft},
    institution =   {Internet Engineering Task Force},
    publisher = {Internet Engineering Task Force},
    note =      {Work in Progress},
    url =       {https://datatracker.ietf.org/doc/draft-perez-abfab-kerberos-preauth-options/01/},
    author =    {Alejandro Pérez-Méndez and Josh Howlett},
    title =     {{Options for Abfab-based Kerberos pre-authentication}},
    pagetotal = 8,
    year =      2012,
    month =     mar,
    day =       12,
    abstract =  {Kerberos is widely used for authentication within organisations. It is not, however, commonly used for authentication between domains or realms ("cross-realm operation"). Abfab is a new architecture, based on the AAA framework, that provides a mechanism for federating authentication between realms. AAA protocols are already widely used for federating authentication for network access scenarios today. It has been proposed that Abfab could be used to provide a mechanism yielding cross-realm functionality for Kerberos. This document discusses two alternative models with the aim of informing and facilitating discussion.},
}