[23707] in Kerberos
Re: gss_init_sec_context() failed: : Ccache function not
daemon@ATHENA.MIT.EDU (Sam Hartman)
Tue Apr 12 18:32:36 2005
To: Kevin Coffman <kwc@citi.umich.edu>
From: Sam Hartman <hartmans@mit.edu>
Date: Tue, 12 Apr 2005 15:35:56 -0400
In-Reply-To: <20050412191309.8CCCB1BB4A@citi.umich.edu> (Kevin Coffman's
message of "Tue, 12 Apr 2005 15:13:09 -0400")
Message-ID: <tsld5szaiub.fsf@cz.mit.edu>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
cc: Jeffrey Altman <jaltman2@nyc.rr.com>
cc: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu
>>>>> "Kevin" == Kevin Coffman <kwc@citi.umich.edu> writes:
>> >>>>> "Jeffrey" == Jeffrey Altman <jaltman2@nyc.rr.com> writes:
>>
Jeffrey> peter huang wrote:
>> >> Can someone tell me how to fix this error? this error came
>> >> from curl using "--negotiate" option on a window platform
>> using >> "MSLSA:" as ccache (AD is the KDC in this case). the
>> client is >> windows XP using MIT 1.3.5 library. BTW, I also
>> experience the >> same error with kerberos ftp with kclient.
>> Is it a problem of >> the library or the way the library get
>> used.
>> >>
>> >> thanks -peter huang
>>
Jeffrey> The MSLSA is a read-only ccache implementation. You
Jeffrey> can't attempt to erase its contents, create a new ccache,
Jeffrey> or store things to it.
>> Sure, but it doesn't sound like gss_init_sec_context should do
>> any of these.
Kevin> Doesn't it, as a by-product, get a service ticket and store
Kevin> it?
Yeah, but in a way that should work with mslsa.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
