SEAM krb API

Henry B. Hotz hbhotz at oxy.edu
Tue Apr 20 14:18:32 EDT 2004


According to something I read on sunsolve, on Solaris 8 Sun forgot to  
remove the Kerberos 4 man pages when they removed the Kerberos 4  
libraries and other code.

To reinforce what other people have said:  1) there is no "native" API  
for Kerberos on Solaris, you use GSSAPI, and 2) there is no mechanism  
within GSSAPI for acquiring an initial tgt for a client, you use kinit  
or pam_krb5.  (Of course if you didn't believe a sun.com answer I don't  
know why you'd believe a nasa.gov one on those points.  ;-)

On Apr 20, 2004, at 9:00 AM, kerberos-request at MIT.EDU wrote:

> Date: Tue, 20 Apr 2004 09:34:03 -0400
> From: Wyllys Ingersoll <wyllys.ingersoll at sun.com>
> To: melissa_benkyo <wyl_lyf at yahoo.com>
> Cc: kerberos at mit.edu
> Subject: Re: SEAM krb API
> Message-ID: <408526CB.7030908 at sun.com>
> In-Reply-To: <304f3217.0404190836.4a66d045 at posting.google.com>
> References: <304f3217.0404190836.4a66d045 at posting.google.com>
> Content-Type: text/plain; charset=ISO-8859-1; format=flowed
> MIME-Version: 1.0
> Content-Transfer-Encoding: 7bit
> Precedence: list
> Message: 8
>
> melissa_benkyo wrote:
>
>> hello all,
>>
>> does seam support kerberos API calls? I need to implement a kerberos
>>
>>
>
> I'm pretty sure this has already been answered several times, but
> the answer is no.  The Kerberos API is not exposed to programmers
> when using SEAM.
>
>> client app that needs to get initial credentials and So far based on
>> my investigation, SEAM doesn't seem to have kerberos api calls. I
>> found krb_get_cred but I believe these are kerberos 4 API calls and
>> besides I dont' have a libkrb. hehehe so that is a problem too.
>>
>>
>
> Yup, thats old and broken Kerberos V4 code that should not be used
> (you must be using Solaris 8, cuz that stuff is not in Solaris 9 or  
> later).
>
> -Wyllys
>
------------------------------------------------------------------------ 
----
The opinions expressed in this message are mine,
not those of Caltech, JPL, NASA, or the US Government.
Henry.B.Hotz at jpl.nasa.gov, or hbhotz at oxy.edu



More information about the Kerberos mailing list