Programming in Kerberos

[Russ Allbery]

Wyllys Ingersoll <wyllys.ingersoll at sun.com> writes:

> Ideally, you wouldn't use the KRB5 APIs at all, you would use GSSAPI
> instead - it is standard and portable across implementations and
> platforms.

Hm, is there a way to use GSSAPI to do password verification?  It's
annoying that one has to do this, but alas it's still fairly common to
have to send a Kerberos username/password pair over a TLS connection to be
verified on the server.  GSSAPI client support is slow to materialize.

-- 
Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>