Question on PAC and principal APIs project
tlyu at MIT.EDU
Tue Feb 10 17:30:22 EST 2009
"Henry B. Hotz" <hotz at jpl.nasa.gov> writes:
> On Feb 9, 2009, at 12:45, Natalie Li wrote:
>> Thanks for the information. I'll take a look at the alpha version
>> later today. Would like to confirm the following:
>> 1) the provided APIs are sufficient for a resource server to extract
>> the PAC from the ticket in KRB_AP_REQ. 2) All the APIs mentioned in
>> the project page (http://k5wiki.kerberos.org/wiki?title=Projects/PAC_and_principal_APIs&redirect=no
>> ) will be in the 1.7 release.
> I gather there is no relationship to the Heimdal/Samba API's for the
> same functions. (I have not tried the Heimdal ones.)
I have not compared these APIs in detail, but our new principal
parsing APIs appear identical to Heimdal.
> I'm not saying there needs to be a direct relationship. Where I get
> the most bent is when things are *almost* the same. Then you waste a
> lot of time trying to make them the same, and tripping on the
> unanticipated differences.
If you have specific examples, please let us know about them, so we
can work on them.
More information about the krbdev