Proposal to export gssapi context
Nicolas.Williams at sun.com
Wed Mar 10 00:36:57 EST 2004
On Tue, Mar 09, 2004 at 07:22:15PM -0500, Sam Hartman wrote:
> >>>>> "Nicolas" == Nicolas Williams <Nicolas.Williams at sun.com> writes:
> Nicolas> I've several comments:
> Nicolas> - With the Kerberos V mechanism you can control what
> Nicolas> enctypes are to be used by controlling what enctypes the
> Nicolas> nfs/* service principals have.
> This only works on the server side.
> I need to control it on the client as well.
> There are multiple implementations out there;)
I forget that this is krbdev and not ietf-krb-wg :/ Kevin's proposal is
entirely reasonable viewed this way :) In fact, I'm sorry I barged in.
So I'll get out of his way now, but not without reiterating my dislike
of the way that the GSS-API [barely] deals with QoPs.
More information about the krbdev