appl/simple/client/sim_client.c uses internal APIs

Ken Hornstein kenh at cmf.nrl.navy.mil
Fri Feb 24 18:48:25 EST 2023


>As an alternative to the krb5 api, stick in the krb5 mechanism oid.
>You can definitively design your protocol and implementation for a
>single round trip by doing that.
>You can have more code in common with applications that do support
>multi-round-trip negotiations, while still getting your half or one
>round trip.

I mean, fair point; that certainly would work.  But if I was doing it
for something internal and I didn't care about portability it wouldn't
alleviate all of the other negatives to the GSSAPI that Russ has
pointed out more eloquently than I.

--Ken


More information about the Kerberos mailing list