Naming extensions implementation

Luke Howard lukeh at padl.com
Wed Aug 26 09:03:40 EDT 2009


See:

	http://k5wiki.kerberos.org/wiki/Projects/VerifyAuthData

Note: this code is still a very rough implementation, it is not ready  
for review yet. The branch is users/lhoward/authdata.

However, today you can use it (see t_namingexts) to:

	* retrieve MS PAC buffers individually
	* determine whether the PAC was verified
	* plug in new authorization data verifiers/serializers
	* submit additional authorization data from initiator to acceptor

All public APIs are at the GSS layer and mirror draft-ietf-kitten- 
gssapi-naming-exts (with some slight changes).

cheers,

-- Luke	
--
www.padl.com | www.fghr.net


More information about the krbdev mailing list