Project review: response sets

[Nico Williams]

On Thu, Jul 12, 2012 at 1:51 PM,  <ghudson at mit.edu> wrote:
> Nathaniel McCallum and I have been working on a project to augment the
> prompter callback to allow for richer initial credential UIs.  The
> writeup is at:
>
> http://k5wiki.kerberos.org/wiki/Projects/Response_set
>
> Input is appreciated.

Sample code would be nice.  It's not entirely clear to me from the
above how I'd use this.

This is not that different from the GSS cred store extension, in many
ways.  You use a callback accessor approach and make the response set
opaque.  You don't use a textual encoding of values.  But it's close.
The differences between the two proposals make for some impedance
mismatches; I'd rather avoid this.

Nico
--