loginLogout notification and calling a plugin with Leash?
jaltman at columbia.edu
Thu Aug 7 20:20:18 EDT 2003
michael.dautermann at umich.edu wrote:
>>The KerberosLogonAPI is not implemented on Windows. (yet)
>>The LeashW32 API does not support any plug-in capability. Neither does
>>the Leash executable.
> ahh, so once a customer has logged in via Leash, the only way they
> can get additional tickets & capabilities would be to run another
As of Kerberos for Windows 2.5, that is correct. Leash will
* import Kerberos 5 credentials from the Windows Kerberos LSA; or
perform a Kerberos 5 ticket request
* perform a krb524; or
perform a Kerberos 4 ticket request
You would then need to execute something else.
If you want to automate the process at startup, call
leash32.exe -kinit OR leash32.exe -ms2mit
This will perform the kinit or ms2mit and then exit. Test the exit
status to determine if it succeeded or failed. If it succeeds execute
your kx509 tool.
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 3427 bytes
Desc: S/MIME Cryptographic Signature
Url : http://mailman.mit.edu/pipermail/krbdev/attachments/20030807/92209624/attachment.bin
More information about the krbdev