gss_acquire_cred with specific keytab

Will Fiveash william.fiveash at
Thu Sep 2 12:13:27 EDT 2004

On Thu, Sep 02, 2004 at 03:05:13PM +0200, Jacques Lebastard wrote:
> Hi there,
> I wrote a simple GSS-API server program (as simple as gss-server).
> This program works fine _if_ the server's principal entry exists in 
> /etc/krb5/keytab (I'm running on Solaris 9).
> I'd like to isolate the server's key in a specific keytab file.
> It is possible to add extra calls prior to gss_acquire_cred so that 
> Kerberos uses this specific keytab file when searching for the 
> principal's key ?

You can set the environment variable KRB5_KTNAME with the full path to
the keytab file.  No modification of your code is necessary.

Will Fiveash
Sun Microsystems Inc.
Austin, TX, USA (TZ=CST6CDT)

More information about the Kerberos mailing list