Creating SPNEGO tokens

Michael B Allen ioplex at gmail.com
Sun Jul 1 13:41:28 EDT 2007


On 7/1/07, Markus Moeller <huaraz at moeller.plus.com> wrote:
> I think I found the reason the string has to be "{ 1 3 6 1 5 5 2 }".
> Wouldn't it make sense to have it already defined in a gssapi header file
> like Heimdal has as gss_mech_spnego ?

Actually it is in gssapi/gssapi_spnego.h:

extern gss_OID GSS_SPNEGO_MECHANISM;
#define gss_mech_spnego GSS_SPNEGO_MECHANISM

But if you don't want to include an implementation specific file you
can just define it yourself like:

static gss_OID_desc _gss_mech_spnego  = {6, (void *)"\x2b\x06\x01\x05\x05\x02"};
gss_OID _GSS_MECH_SPNEGO  = &_gss_mech_spnego;

Mike

>
> Markus
>
> "Markus Moeller" <huaraz at moeller.plus.com> wrote in message
> news:f684oo$gqi$1 at sea.gmane.org...
> > But the input to gss_init_sec_context is a gss_OID structure. How do I
> > build the structure ? If I use gss_str_to_oid I get an error "Invalid
> > argument"
> >
> > Thanks
> > Markus
> >
> > "Michael B Allen" <ioplex at gmail.com> wrote in message
> > news:78c6bd860706302220s3384e154t6c888514a4a11ebe at mail.gmail.com...
> >> On 6/30/07, Markus Moeller <huaraz at moeller.plus.com> wrote:
> >>> Which mech OID do I need to use in gss_init_sec_context to get a SPNEGO
> >>> token ? I looked in the header files of 1.6.1 but it is not defined
> >>> there.
> >>
> >> Hi Markus,
> >>
> >> The OID for SPNEGO is 1.3.6.1.5.5.2.
> >>
> >> Mike
> >> ________________________________________________
> >> Kerberos mailing list           Kerberos at mit.edu
> >> https://mailman.mit.edu/mailman/listinfo/kerberos
> >>
> >
> >
> >
> > ________________________________________________
> > Kerberos mailing list           Kerberos at mit.edu
> > https://mailman.mit.edu/mailman/listinfo/kerberos
> >
>
>
>
> ________________________________________________
> Kerberos mailing list           Kerberos at mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
>



More information about the Kerberos mailing list