lördag 25 oktober 2008

The krb5-cc-[gs]et-config API

I've created a new API to the krb5_ functions, its for storing Kerberos related data in the credential cache.

  • Realm configuration that is fetched runtime, for that the target is a domain that only should have Kerberos canonlization done and not dns canonlization

  • Forwarded tickets, to avoid re-fetching the from the KDC


krb5_cc_get_config
krb5_is_config_principal
krb5_cc_set_config

There is a patch for MIT Kerberos that also includes this interface, so hopefully it will be included in MIT Kerberos 1.7.

Inga kommentarer:

Skicka en kommentar