[krbdev.mit.edu #7598] git commit

Greg Hudson via RT rt-comment at krbdev.mit.edu
Mon Apr 1 13:26:15 EDT 2013


Add support for client keytab from cred store

The new credential store extensions added support for specifying a
specific ccache name and also a specific keytab to be used for accepting
security contexts, but did not add a way to specify a client keytab
to be used in conjunction with the Keytab initiation support added also
in 1.11

This patch introduces a new URN named client_keytab through which a
specific client_keytab can be set when calling gss_acquire_cred_from()
and Keytab Initiation will use that keytab to initialize credentials.

[ghudson at mit.edu: minor C style fix]

https://github.com/krb5/krb5/commit/38cc076579888695a5820ceb44fe43020f5b61e1
Author: Simo Sorce <simo at redhat.com>
Committer: Greg Hudson <ghudson at mit.edu>
Commit: 38cc076579888695a5820ceb44fe43020f5b61e1
Branch: master
 src/lib/gssapi/krb5/acquire_cred.c |   53 +++++++++++++++++++++++++++++-------
 src/lib/gssapi/krb5/gssapiP_krb5.h |    1 +
 2 files changed, 44 insertions(+), 10 deletions(-)



More information about the krb5-bugs mailing list