Windows future

[Luke Howard]

On 17/08/2010, at 3:39 PM, Jeffrey Altman wrote:

> On 8/13/2010 10:01 AM, Douglas E. Engert wrote:
> 
>> What is missing is an OpenAFS aklog that can use SSPI.
>> My old gssklog from 2004 could use SSPI  :-)
> 
> While it is certainly true that the rxkad aklog could be implemented
> using the LSA credential cache functions to request a krb5 service
> ticket for afs, the SSPI cannot be used to obtain rxgk security tokens
> because it lacks an implementation of the GSS PRF.


What about, until such time that SSPI implements the GSS PRF, building a wrapper around QueryContextAttributes(SECPKG_ATTR_SESSION_KEY)?

-- Luke