any non-krb5int way to pass a keyblock to get_init_creds?

Chris Hecker checker at d6.com
Mon Aug 1 23:58:49 EDT 2011


Yeah, it seems like a kind of cool addition to the kerberos toolset.  I 
was bummed to find the project hadn't been updated since 2005.  I 
emailed the Fermilab people, who hacked on it a bit but never released 
their changes, and the guy there said they might throw it up on github.

Chris


On 2011/08/01 16:04, Jeffrey Altman wrote:
> On 8/1/2011 4:58 PM, Chris Hecker wrote:
>>
>> I was also looking at kx509, but that
>> project seems a bit moribund, and even so it seemed like more work and
>> heavier weight than just setting up mod_auth_kerb and hacking up an
>> SPNEGO token wrapper for a krb5 ticket[*].
>>
>> Chris
>
> kx509 support is built into Heimdal and Secure Endpoints provides a
> kx509 (aka KCA) server for Active Directory and a plug-in for Network
> Identity Manager on Windows.
>
> Jeffrey Altman
>
>
>
>
> ________________________________________________
> Kerberos mailing list           Kerberos at mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos



More information about the Kerberos mailing list