gss_accept_sec_context failing after getting service ticket using service name and password

Nicolas Williams Nicolas.Williams at sun.com
Tue May 30 12:03:42 EDT 2006


On Fri, May 26, 2006 at 11:06:06PM -0400, Michael B Allen wrote:
> On Fri, 26 May 2006 01:25:39 -0500
> Nicolas Williams <Nicolas.Williams at sun.com> wrote:
> 
> > > Is there a way
> > > to convert from krb5_creds to gss_cred_id_t?
> > 
> > No, there isn't.
> > 
> > For Solaris Nevada we're looking at adding a mechanism-specific
> > gss_acquire_cred_from_ccache() GSS-API extension.
> 
> At some point don't you just want to punt and use opaque types? Using an
> import/export or inquire_by_oid kind of interface implies the result
> can be represented in a serialized form which is somewhat annoying.

Yes.



More information about the krbdev mailing list