Optimizing gss_init_sec_context possible?

Martin Gee geemang_2000 at yahoo.com
Tue Sep 22 11:13:35 EDT 2015


Version: 1.13.2 kerb lib
I'm using the GSS libs to impersonate a user via HTTP SPNEGO (http://tools.ietf.org/html/rfc4559)
I use gss_init_sec_context to get a Token which is sent over to the HTTP service (see spec) in an HTTP Header. This is necessary. 
I'm profiling my app. The gss_init_sec_context is the most expensive call.   I notice that gss_init_sec_context gives you a context handle. 
Is it possible to reuse the context and still get a token? 


More information about the Kerberos mailing list