Proposal to export gssapi context

Nicolas Williams Nicolas.Williams at
Wed Mar 10 00:36:57 EST 2004

On Tue, Mar 09, 2004 at 07:22:15PM -0500, Sam Hartman wrote:
> >>>>> "Nicolas" == Nicolas Williams <Nicolas.Williams at> writes:
>     Nicolas> I've several comments:
>     Nicolas>  - With the Kerberos V mechanism you can control what
>     Nicolas> enctypes are to be used by controlling what enctypes the
>     Nicolas> nfs/* service principals have.
> This only works on the server side.
> I need to control it on the client as well.  
> There are multiple implementations out there;)

I forget that this is krbdev and not ietf-krb-wg :/  Kevin's proposal is
entirely reasonable viewed this way :)  In fact, I'm sorry I barged in.

So I'll get out of his way now, but not without reiterating my dislike
of the way that the GSS-API [barely] deals with QoPs.



More information about the krbdev mailing list