GSSAPI client on Windows

SFBZH@aol.com SFBZH at aol.com
Wed Aug 3 12:31:00 EDT 2005


I have tried gss-server and gss-client:
The pc35 keytab contains a key for server at pc35.etiam.com@ETIAM.COM

The server (on pc35):

C:\test>gss-server server at pc35
context flag: GSS_C_MUTUAL_FLAG
context flag: GSS_C_REPLAY_FLAG
context flag: GSS_C_CONF_FLAG
context flag: GSS_C_INTEG_FLAG
Accepted connection: "user at DOMAIN.COM"
Received message: "bla"
reading token length: No error

The client (on pc35):

C:\test>gss-client pc35 server at pc35 bla
Sending init_sec_context token (size=471)...continue needed...

context flag: GSS_C_MUTUAL_FLAG
context flag: GSS_C_REPLAY_FLAG
context flag: GSS_C_CONF_FLAG
context flag: GSS_C_INTEG_FLAG
"user at DOMAIN.COM" to "server/pc35.domain.com at DOMAIN.COM", lifetime 34602, flags 136
, locally initiated, open
Name type of source name is { 1 2 840 113554 1 2 2 1 }.
Mechanism { 1 2 840 113554 1 2 2 } supports 8 names
  0: { 1 2 840 113554 1 2 1 1 }
  1: { 1 2 840 113554 1 2 1 2 }
  2: { 1 2 840 113554 1 2 1 3 }
  3: { 1 2 840 113554 1 2 1 4 }
  4: { 1 3 6 1 5 6 2 }
  5: { 1 3 6 1 5 6 4 }
  6: { 1 2 840 113554 1 2 2 1 }
  7: { 1 2 840 113554 1 2 2 2 }
Signature verified.

I guess it means that the OS was inequitably suspected.
Lets remember that Kerberos gssapi works on Windows98.

Best regards.

M


More information about the krbdev mailing list