[krbdev.mit.edu #1278] No prompter interface for krb5_get_init_creds_keytab

Marc Horowitz marc at MIT.EDU
Tue Dec 17 13:05:53 EST 2002


"Ken Hornstein via RT" <rt-comment at krbdev.mit.edu> writes:

>> I discovered recently that the API krb5_get_init_creds_keytab doesn't
>> take a prompter argument.  This makes it difficult to do things like
>> hardware preauthentication using a key stored in a keytab.
>> 
>> Any comments?

Why do you think you need this?  The idea of getting initial creds
from a keytab is that a daemon or other automated task can act as a
kerberos client without user interaction.  If you require user
interaction, why aren't you just using a password?

                Marc



More information about the krb5-bugs mailing list