create krb5 context without config files

Benjamin Kaduk kaduk at MIT.EDU
Tue Jun 10 23:21:33 EDT 2014


On Tue, 10 Jun 2014, Bin Lu wrote:

> Hi,
>
> Is there a way to create a krb5 lib context without using any config 
> files, include /etc/krb5.conf and files set in environmental variables? 
> Assume the realm/domain and kdc server info is already available.

For this I think you need to use krb5_init_context_profile(), with a 
profile derived from profile_init_vtable() (see <profile.h>).

I see that your previous message did not get answered, but it looks like 
if you are asking this question, you have gotten past it.  I will note 
that the server doing password verification will need to have kerberos 
credentials of its own and take care to avoid the Zanarotti attack.

-Ben Kaduk


More information about the krbdev mailing list