Development environment setup

Idan Freiberg speidy at
Mon Feb 26 11:31:11 EST 2018

Robbie, I have an experience with both of the apis.
U2U RFC is already implemented by MS Both in Kerberos client and KDC.
I want to make MIT Kerberos interoperable with it as well.

בתאריך יום ב׳, 26 בפבר׳ 2018 ב-18:28 מאת Robbie Harwood <rharwood at

> Idan Freiberg <speidy at> writes:
> > I’m planning to work on Kerberos u2u support.  I would like to have
> > you advice on what is the best env setup I should do for development.
> >
> > I want the code to be compatible with MS KDC as well.
> >
> > Should I code against Samba KDC first?  The addition is mainly in the
> > gssapi area I think.
> Samba uses MIT (or Heimdal, depending on where you get it and how you
> build it) these days, and I think the debuggability you'll get out of
> those will be a lot higher than from Microsoft's.
> What do you mean by "addition"?  Microsoft's KDC isn't open source, so I
> don't know how you could add things to it - this means protocol changes
> are going to be difficult.  Also, it doesn't support the GSSAPI (there
> is some measure of compatibility between GSSAPI and SSPI on the wire,
> but the API is not identitcal).
> Thanks,
> --Robbie
Idan Freiberg

PGP FP: 8108 7EC9 806E 4980 75F2  72B3 8AD3 2D04 337B 1F18

More information about the krbdev mailing list