Proposal to export gssapi context

[Nicolas Williams]

On Tue, Mar 09, 2004 at 07:22:15PM -0500, Sam Hartman wrote:
> >>>>> "Nicolas" == Nicolas Williams <Nicolas.Williams at sun.com> writes:
> 
>     Nicolas> I've several comments:
> 
>     Nicolas>  - With the Kerberos V mechanism you can control what
>     Nicolas> enctypes are to be used by controlling what enctypes the
>     Nicolas> nfs/* service principals have.
> 
> This only works on the server side.
> 
> I need to control it on the client as well.  
> 
> There are multiple implementations out there;)

I forget that this is krbdev and not ietf-krb-wg :/  Kevin's proposal is
entirely reasonable viewed this way :)  In fact, I'm sorry I barged in.

So I'll get out of his way now, but not without reiterating my dislike
of the way that the GSS-API [barely] deals with QoPs.

Cheers,

Nico
--