[29999] in Kerberos

home help back first fref pref prev next nref lref last post

Re: Kinit programatically??

daemon@ATHENA.MIT.EDU (Russ Allbery)
Mon Jun 23 12:16:38 2008

To: "kul gupta" <kulg123@gmail.com>
In-Reply-To: <2203f95e0806222151g53570af2nec3f2fe17a46958b@mail.gmail.com>
	(kul gupta's message of "Mon\, 23 Jun 2008 10\:21\:12 +0530")
From: Russ Allbery <rra@stanford.edu>
Date: Mon, 23 Jun 2008 09:14:34 -0700
Message-ID: <87skv4f7rp.fsf@windlord.stanford.edu>
MIME-Version: 1.0
Cc: "Tadoori \(EXT\), Vilas" <vilas.tadoori.ext@siemens.com>, krbdev@mit.edu,
   kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

"kul gupta" <kulg123@gmail.com> writes:

> hello
> Thanks
> I m using MIT kerberose.
> I will appreciate if someone can help me how to proceed to ahieve the
> "Kinit" programatically.
>
>
> The user has entered -username and password through stdin.
> How can i get the TGT programatically?(using GSS-API) so as to proceed
> further .??

You cannot get a TGT using GSSAPI.  GSSAPI has no facility for initial
authentication.

For an example of many different types of authentication using the native
Kerberos API, take a look at:

    http://www.eyrie.org/~eagle/software/kstart/

If you already have the password in hand, you probably want the
krb5_get_init_creds_password function, but there's some setup that you
have to do first and you probably want to store the credentials in a
ticket cache afterwards.

-- 
Russ Allbery (rra@stanford.edu)             <http://www.eyrie.org/~eagle/>
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post