X-CACHECONF in cache type 0504

Tim Alsop Tim at cybersafe.com
Fri Nov 19 11:27:08 EST 2010


Ok, so we can use krb5_ccache_conf_data at the start with the X-CACHECONF:
as realm, but the data between these two elements can be anything we want.

e.g. This is valid and acceptable if found in a cache:
krb5_ccache_conf_data/foo/bar/hello/world at X-CACHECONF:

Thanks,
Tim

On 19/11/2010 16:21, "Greg Hudson" <ghudson at mit.edu> wrote:

>On Fri, 2010-11-19 at 11:03 -0500, Tim Alsop wrote:
>> So, is this name/realm specific to configuration data for FAST ? What
>> happens if a vendor wants to store configuration data for some other
>> reason, and not for FAST reasons ? Do they use different name/realm ?
>
>No; in fact, Heimdal already uses it for another purpose (something
>called "FriendlyName").  The service principal format is:
>
>krb5_ccache_conf_data/name/principal at X-CACHECONF:
>
>where "name" is an argument to krb5_cc_get_config() and
>krb5_cc_set_config().  For FAST negotiation, "name" is set to
>fast_avail.
>
>





More information about the krbdev mailing list