[22352] in Kerberos

home help back first fref pref prev next nref lref last post

Re: gss_acquire_cred with specific keytab

daemon@ATHENA.MIT.EDU (Will Fiveash)
Thu Sep 2 12:18:06 2004

Date: Thu, 2 Sep 2004 11:13:27 -0500
From: Will Fiveash <william.fiveash@sun.com>
To: Jacques Lebastard <jacques.lebastard@evidian.com>
Message-ID: <20040902161327.GA676461@sun.com>
Mail-Followup-To: Jacques Lebastard <jacques.lebastard@evidian.com>,
	kerberos@mit.edu
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <41371A89.1070908@evidian.com>
cc: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu

On Thu, Sep 02, 2004 at 03:05:13PM +0200, Jacques Lebastard wrote:
> 
> Hi there,
> 
> I wrote a simple GSS-API server program (as simple as gss-server).
> 
> This program works fine _if_ the server's principal entry exists in 
> /etc/krb5/keytab (I'm running on Solaris 9).
> 
> I'd like to isolate the server's key in a specific keytab file.
> It is possible to add extra calls prior to gss_acquire_cred so that 
> Kerberos uses this specific keytab file when searching for the 
> principal's key ?

You can set the environment variable KRB5_KTNAME with the full path to
the keytab file.  No modification of your code is necessary.

-- 
Will Fiveash
Sun Microsystems Inc.
Austin, TX, USA (TZ=CST6CDT)
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post