GSSAPI context time limitation

Sam Hartman hartmans at MIT.EDU
Thu Jul 24 12:26:00 EDT 2003


>>>>> "Wachdorf," == Wachdorf, Daniel R <drwachd at sandia.gov> writes:

    Wachdorf,>    The problem arises that these services may be up for
    Wachdorf,> an extended period of time, yet the gssapi context will
    Wachdorf,> expire.  Is there a way to establish a gssapi context,
    Wachdorf,> and use wrap and unwrap despite the fact that the
    Wachdorf,> context, or even the TGT used to establish the context
    Wachdorf,> may be expired?


Not in the MIT implementation at the current time.  The preferred way
of handling this is to have an application protocol taht supports new
context establishment.



More information about the krbdev mailing list