Kerberos supports different ways (ccache types) of storing tickets, such as:
- FILE
- MEMORY
- KEYRING
I was wondering whether it would technically be possible to also store the Ticket-granting-ticket and service ticket in a YubiKey. These tickets could then be read from the key when they are needed and directly be erased from memory after being sent.
I know that the whole point of storing a private PGP key in a YubiKey is the fact that it can only be written and never be read again. All necessary operations are executed inside the YubiKey.
Kerberos tickets would have to be readable so they can be sent to the Key-distribution-center or web service.
So, would it be possible to use a YubiKey as another ccache type for Kerberos?