Question on PAC and principal APIs project

Natalie Li Natalie.Li at Sun.COM
Mon Feb 9 12:45:47 EST 2009


Ken,

Thanks for the information.  I'll take a look at the alpha version later 
today.  Would like to confirm the following:

1) the provided APIs are sufficient for a resource server to extract the 
PAC from the ticket in KRB_AP_REQ. 
2) All the APIs mentioned in the project page 
(http://k5wiki.kerberos.org/wiki?title=Projects/PAC_and_principal_APIs&redirect=no) 
will be in the 1.7 release.

Thanks,

Natalie

Ken Raeburn wrote:
> On Feb 8, 2009, at 12:57, Natalie Li wrote:
>> Does anyone have a rough idea as to which release this project is
>> targeted for?
>
> The basic support for PAC data and such will be in the 1.7 release -- 
> there's already an alpha out if you'd like to take a look.  We don't 
> currently have support in our shipping database back ends to supply 
> PAC data, but if a site or vendor wants to supply a database back end 
> that provides that data, the KDC should use it and send it.
>
> Ken




More information about the krbdev mailing list