Krb5 API vs. GSSAPI

[Fredrik Tolf]

On Tue, 2005-01-18 at 17:04 -0500, "Frank Balluffi" wrote:
> Fredrik,
> 
> GSSAPI is a standard. Kerberos APIs are implementation specific. 

Oh, do you mean specific to MIT Kerberos? In that case, it does seem to
be making quite some difference. =)

Thanks for enlightening me!

> Also, 
> GSSAPI supports many mechanisms.

Is that so? I've only ever seen Kerberos being carried out over GSSAPI.
What others are there?

> Frank
> 
> 
> 
> 
> 
> Fredrik Tolf <fredrik at dolda2000.com>
> Sent by: kerberos-bounces at MIT.EDU
> 01/18/2005 03:19 PM
> 
>  
>         To:     kerberos at MIT.EDU
>         cc: 
>         Subject:        Krb5 API vs. GSSAPI
> 
> 
> Hi!
> 
> I've been writing a couple of programs that use Kerberos for
> authentication. I've been using the Krb5 native API, since the example
> programs that came with the MIT Krb5 source distribution that were using
> the native API seemed much simpler than those that used GSSAPI.
> 
> However, looking around at other programs, it seems that most (all?) are
> using GSSAPI. Thus, I'm wondering what the advantages of using GSSAPI
> are, and when you should use GSSAPI and when you should use the native
> API. I know that GSSAPI is supposed to be able to support other
> mechanism apart from Kerberos, but from what I know, this hasn't
> happened so far, so that doesn't really seem to be a very great
> advantage of using GSSAPI.
> 
> Can someone enlighten me on this issue, please?
> 
> Fredrik Tolf
> 
> 
> ________________________________________________
> Kerberos mailing list           Kerberos at mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
> 
> 
> 
> 
> ________________________________________________
> Kerberos mailing list           Kerberos at mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
>