keberos v5 and WS-Security specification question

[Mitko Iliev]

--- Luke Howard <lukeh at PADL.COM> wrote:
> 
> From my brief reading of the WS-Security spec it
> doesn't look like
> the GSS-API token format is used.

Yeah, i've suspect that :-(
The WS-security spec mention Kerberos v5 tickets as
per rfc1510, but i do not see GSS API nor MIT kerberos
functions to:
- encrypt/sign (and reverse) a message with a ticket. 
(or at least i can't found any example how to do
that).

Any oppinion please? 

Thanks a lot,
Mitko 

> 
> -- LUke
> 
> >From: Mitko Iliev <imitko at yahoo.com>
> >Subject: keberos v5 and WS-Security specification
> question
> >To: kerberos at mit.edu
> >Date: Mon, 30 Sep 2002 08:12:22 -0700 (PDT)
> >
> >hello all,
> >
> >i'm implementing a SOAP server which is supposed
> use
> >Kerberos v5 TGS tickets to encrypt/sign the data
> using
> >WS-Security specification by microsoft. 
> >But my problem is that i can't extract with GSSAPI 
> >encryption or signing algorithm (this is needed to
> >make properly the <enc:EncryptionMethod
> Algorithm="">
> >element). 
> >
> >Could anyone help me ? 
> >
> >Thanks in advance,
> >Mitko Iliev
> >
> >=====
>
>-------------------------------------------------------
> >		Homo homenes lupus est.
>
>////////////////////////////////////////////////////////
> >
> >__________________________________________________
> >Do you Yahoo!?
> >New DSL Internet Access from SBC & Yahoo!
> >http://sbc.yahoo.com
> >________________________________________________
> >Kerberos mailing list           Kerberos at mit.edu
> >http://mailman.mit.edu/mailman/listinfo/kerberos
> 
> --
> Luke Howard | PADL Software Pty Ltd | www.padl.com


__________________________________________________
Do you Yahoo!?
New DSL Internet Access from SBC & Yahoo!
http://sbc.yahoo.com