WS-Security and GSS-API: How do I get the session key?

Luke Howard lukeh at
Sun Mar 8 23:49:23 EDT 2009

On 09/03/2009, at 1:45 PM, Max (Weijun) Wang wrote:

>> gss_krb5_get_tkt_flags()
>> gsskrb5_extract_authz_data_from_sec_context()
>> gsskrb5_extract_authtime_from_sec_context()
> I guess the tkt or authXXX above are all for the intial TGT (instead  
> of any service ticket). Right?

The service ticket; the service does not have the TGT (although the  
KDC may use the TGT in deriving those values).

-- Luke

More information about the Kerberos mailing list