Question on PAC and principal APIs project

Tom Yu tlyu at MIT.EDU
Tue Feb 10 17:30:22 EST 2009

"Henry B. Hotz" <hotz at> writes:

> On Feb 9, 2009, at 12:45, Natalie Li wrote:
>> Ken,
>> Thanks for the information.  I'll take a look at the alpha version
>> later today.  Would like to confirm the following:
>> 1) the provided APIs are sufficient for a resource server to extract
>> the PAC from the ticket in KRB_AP_REQ. 2) All the APIs mentioned in
>> the project page (
>> ) will be in the 1.7 release.
> I gather there is no relationship to the Heimdal/Samba API's for the  
> same functions.  (I have not tried the Heimdal ones.)

I have not compared these APIs in detail, but our new principal
parsing APIs appear identical to Heimdal.

> I'm not saying there needs to be a direct relationship.  Where I get  
> the most bent is when things are *almost* the same.  Then you waste a  
> lot of time trying to make them the same, and tripping on the  
> unanticipated differences.

If you have specific examples, please let us know about them, so we
can work on them.

More information about the krbdev mailing list