Credentials via gss_acquire_cred and GSS_C_BOTH

[Rick Macklem]

nick.thurn at db.com ("Nick Thurn") wrote in message news:<OF0E04CE46.118484A5-ONCA256DE8.007ED2AE at db.com>...
> Hi Folks,
> 
> I have a server/client combination using the GSSAPI that comes with the MIT
> distribution. It happily works when the server just accepts and the client just
> initiates.
> 
> I need to be able to both accept and initiate from the server so changed my code
[stuff snipped]
To get Initiator Credentials (and that includes BOTH), you need to have a
TGT for the Principal. You can get one via "kinit -k <Principal>", assuming
you have the Principal in a keytab file.

In general, the minor_status code is the KerberosV error. You can then hunt
that down in the sources. (It makes life easier if you assign the value to
a signed int and then print it in decimal, since the MIT Kerberos errors are
all large negative numbers.)

Good luck with it, rick