[krbdev.mit.edu #1278] No prompter interface for krb5_get_init_creds_keytab

Ken Hornstein via RT rt-comment at krbdev.mit.edu
Tue Dec 17 11:55:43 EST 2002


I discovered recently that the API krb5_get_init_creds_keytab doesn't
take a prompter argument.  This makes it difficult to do things like
hardware preauthentication using a key stored in a keytab.

I propose the following API to solve the problem:

krb5_get_init_creds_keytab_prompter
KRB5_PROTOTYPE((krb5_context context,
                krb5_creds *creds,
                krb5_principal client,
                krb5_keytab arg_keytab,
                krb5_prompter_fct prompter,
                void *data,
                krb5_deltat start_time,
                char *in_tkt_service,
                krb5_get_init_creds_opt *options));

(Obviously, it looks a whole lot like the krb5_get_init_creds_keytab
API).  I'm not so convinced the name is particularly great, though.

Any comments?



More information about the krb5-bugs mailing list