loginLogout notification and calling a plugin with Leash?

[Jeffrey Altman]

michael.dautermann at umich.edu wrote:

>>The KerberosLogonAPI is not implemented on Windows.  (yet)
>>
>>The LeashW32 API does not support any plug-in capability.  Neither does 
>>the Leash executable.
> 
> 
> ahh, so once a customer has logged in via Leash, the only way they
> can get additional tickets & capabilities would be to run another
> applicaton?

As of Kerberos for Windows 2.5, that is correct.  Leash will

  * import Kerberos 5 credentials from the Windows Kerberos LSA; or
    perform a Kerberos 5 ticket request

  * perform a krb524; or
    perform a Kerberos 4 ticket request

You would then need to execute something else.

If you want to automate the process at startup, call

   leash32.exe -kinit  OR  leash32.exe -ms2mit

This will perform the kinit or ms2mit and then exit.  Test the exit 
status to determine if it succeeded or failed.  If it succeeds execute 
your kx509 tool.



-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3427 bytes
Desc: S/MIME Cryptographic Signature
Url : http://mailman.mit.edu/pipermail/krbdev/attachments/20030807/92209624/attachment.bin