microsoft xp gssapi client talking to solaris8 gssapi server

Wyllys Ingersoll wyllys.ingersoll at sun.com
Mon Oct 7 15:25:07 EDT 2002


Actually davidchr wrote:
> Our gssapi samples do not speak the same wireprotocol as the
> corresponding gssclient/gssserver in the MIT distribution because ours
> are based on an earlier implementation.  See Paul's email on this
> (attached).
> 
> If you need the samples to test interop between the two implementations,
> I recommend that you grab incarnations of gssclient and gssserver from
> previous MIT distributions.
> 

The gss-sample code from the MIT KRB5 v1.0 release will work with
the gss-sample code in the MS Platform SDK.  I have been using these
things recently and they do work together.

The problems with the newer MIT GSS samples and the MS samples are
not due to GSSAPI/SSPI incompatibilities, but because MIT added some
new "tokens" and flags that the client and servers exchange to coordinate
the sample testing.   Perhaps someone from MIT can explain better
what they did in the newer code.

-Wyllys





More information about the Kerberos mailing list