[23216] in Kerberos
Krb5 API vs. GSSAPI
daemon@ATHENA.MIT.EDU (Fredrik Tolf)
Tue Jan 18 16:38:28 2005
From: Fredrik Tolf <fredrik@dolda2000.com>
Date: Tue, 18 Jan 2005 21:19:24 +0100
Message-ID: <1106079564.4883.39.camel@pc7>
To: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu
Hi!
I've been writing a couple of programs that use Kerberos for
authentication. I've been using the Krb5 native API, since the example
programs that came with the MIT Krb5 source distribution that were using
the native API seemed much simpler than those that used GSSAPI.
However, looking around at other programs, it seems that most (all?) are
using GSSAPI. Thus, I'm wondering what the advantages of using GSSAPI
are, and when you should use GSSAPI and when you should use the native
API. I know that GSSAPI is supposed to be able to support other
mechanism apart from Kerberos, but from what I know, this hasn't
happened so far, so that doesn't really seem to be a very great
advantage of using GSSAPI.
Can someone enlighten me on this issue, please?
Fredrik Tolf
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
