gss_init_sec_context() failed: : Ccache function not supported:

Jeffrey Altman jaltman2 at nyc.rr.com
Tue Apr 12 15:06:34 EDT 2005


Sam Hartman wrote:

>>>>>>"Jeffrey" == Jeffrey Altman <jaltman2 at nyc.rr.com> writes:
> 
> 
>     Jeffrey> peter huang wrote:
>     >> Can someone tell me how to fix this error?  this error came
>     >> from curl using "--negotiate" option on a window platform using
>     >> "MSLSA:" as ccache (AD is the KDC in this case).  the client is
>     >> windows XP using MIT 1.3.5 library.  BTW, I also experience the
>     >> same error with kerberos ftp with kclient.  Is it a problem of
>     >> the library or the way the library get used.
>     >> 
>     >> thanks -peter huang
> 
>     Jeffrey> The MSLSA is a read-only ccache implementation.  You
>     Jeffrey> can't attempt to erase its contents, create a new ccache,
>     Jeffrey> or store things to it.
> 
> Sure, but it doesn't sound like gss_init_sec_context should do any of
> these.

Why is kclient being used with a gss application?
kclient is a kerberos 4 only api.  I would expect kclient to behave
very badly with MSLSA: as the ccache.



More information about the Kerberos mailing list