Windows future

Luke Howard lukeh at
Tue Aug 17 09:51:25 EDT 2010

On 17/08/2010, at 3:39 PM, Jeffrey Altman wrote:

> On 8/13/2010 10:01 AM, Douglas E. Engert wrote:
>> What is missing is an OpenAFS aklog that can use SSPI.
>> My old gssklog from 2004 could use SSPI  :-)
> While it is certainly true that the rxkad aklog could be implemented
> using the LSA credential cache functions to request a krb5 service
> ticket for afs, the SSPI cannot be used to obtain rxgk security tokens
> because it lacks an implementation of the GSS PRF.

What about, until such time that SSPI implements the GSS PRF, building a wrapper around QueryContextAttributes(SECPKG_ATTR_SESSION_KEY)?

-- Luke

More information about the krbdev mailing list