inspecting krb5 ticket in GSSAPI

[Luke Howard]

On 10/11/2010, at 6:50 AM, Frank Cusack wrote:

> If I want my GSSAPI server application to inspect the kerberos
> ticket flags, is there a way to do this?

gss_krb5_get_tkt_flags()

> It looks like I would just take the token the client sent, verify
> the mechanism and then *do something* to extract the krb5 ticket.
> Then I could create a krb5 context and look at the flags.

There's no way to get the raw ticket.

-- Luke