inspecting krb5 ticket in GSSAPI

Luke Howard lukeh at
Tue Nov 9 16:29:57 EST 2010

On 10/11/2010, at 6:50 AM, Frank Cusack wrote:

> If I want my GSSAPI server application to inspect the kerberos
> ticket flags, is there a way to do this?


> It looks like I would just take the token the client sent, verify
> the mechanism and then *do something* to extract the krb5 ticket.
> Then I could create a krb5 context and look at the flags.

There's no way to get the raw ticket.

-- Luke

More information about the krbdev mailing list