[30004] in Kerberos
Re: Kinit programatically??
daemon@ATHENA.MIT.EDU (Russ Allbery)
Tue Jun 24 00:31:35 2008
To: "kul gupta" <kulg123@gmail.com>
In-Reply-To: <2203f95e0806232126g65ff1a96redaee1e5e1f3504a@mail.gmail.com>
(kul gupta's message of "Tue\, 24 Jun 2008 09\:56\:53 +0530")
From: Russ Allbery <rra@stanford.edu>
Date: Mon, 23 Jun 2008 21:30:00 -0700
Message-ID: <87prq7h2uv.fsf@windlord.stanford.edu>
MIME-Version: 1.0
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
You should really keep copying the mailing list so that other people can
also help. I've re-added the mailing list as a cc.
"kul gupta" <kulg123@gmail.com> writes:
> Thanks a lot
> It helped me
> I read the link provided by u for Kstart
> But Can i use it for the authentication on the client side?
> When using Kinit ( or using krb5_get_init_creds_password ),it direcltly
> contacts KDC.
> Is there any possible way or API where i can get the credentials in between
> KDC and the client.
I'm not entirely sure what you're asking. If you're asking if there's a
way to get a Kerberos TGT without contacting the KDC, the answer is no.
That's a requirement of the Kerberos protocol and is fundamental to how
Kerberos works. If you're asking something else, could you try
rephrasing?
--
Russ Allbery (rra@stanford.edu) <http://www.eyrie.org/~eagle/>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
