lukeh at padl.com
Tue Aug 17 09:51:25 EDT 2010
On 17/08/2010, at 3:39 PM, Jeffrey Altman wrote:
> On 8/13/2010 10:01 AM, Douglas E. Engert wrote:
>> What is missing is an OpenAFS aklog that can use SSPI.
>> My old gssklog from 2004 could use SSPI :-)
> While it is certainly true that the rxkad aklog could be implemented
> using the LSA credential cache functions to request a krb5 service
> ticket for afs, the SSPI cannot be used to obtain rxgk security tokens
> because it lacks an implementation of the GSS PRF.
What about, until such time that SSPI implements the GSS PRF, building a wrapper around QueryContextAttributes(SECPKG_ATTR_SESSION_KEY)?
More information about the krbdev