[23706] in Kerberos
Re: gss_init_sec_context() failed: : Ccache function not supported:
daemon@ATHENA.MIT.EDU (Jeffrey Altman)
Tue Apr 12 18:29:02 2005
From: Jeffrey Altman <jaltman2@nyc.rr.com>
Message-ID: <__U6e.6770$n93.537@twister.nyc.rr.com>
Date: Tue, 12 Apr 2005 19:06:34 GMT
To: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu
Sam Hartman wrote:
>>>>>>"Jeffrey" == Jeffrey Altman <jaltman2@nyc.rr.com> writes:
>
>
> Jeffrey> peter huang wrote:
> >> Can someone tell me how to fix this error? this error came
> >> from curl using "--negotiate" option on a window platform using
> >> "MSLSA:" as ccache (AD is the KDC in this case). the client is
> >> windows XP using MIT 1.3.5 library. BTW, I also experience the
> >> same error with kerberos ftp with kclient. Is it a problem of
> >> the library or the way the library get used.
> >>
> >> thanks -peter huang
>
> Jeffrey> The MSLSA is a read-only ccache implementation. You
> Jeffrey> can't attempt to erase its contents, create a new ccache,
> Jeffrey> or store things to it.
>
> Sure, but it doesn't sound like gss_init_sec_context should do any of
> these.
Why is kclient being used with a gss application?
kclient is a kerberos 4 only api. I would expect kclient to behave
very badly with MSLSA: as the ccache.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
