[krbdev.mit.edu #1278] No prompter interface for krb5_get_init_creds_keytab
Marc Horowitz
marc at MIT.EDU
Tue Dec 17 13:05:53 EST 2002
"Ken Hornstein via RT" <rt-comment at krbdev.mit.edu> writes:
>> I discovered recently that the API krb5_get_init_creds_keytab doesn't
>> take a prompter argument. This makes it difficult to do things like
>> hardware preauthentication using a key stored in a keytab.
>>
>> Any comments?
Why do you think you need this? The idea of getting initial creds
from a keytab is that a daemon or other automated task can act as a
kerberos client without user interaction. If you require user
interaction, why aren't you just using a password?
Marc
More information about the krb5-bugs
mailing list