[37237] in Kerberos

home help back first fref pref prev next nref lref last post

Optimizing gss_init_sec_context possible?

daemon@ATHENA.MIT.EDU (Martin Gee)
Tue Sep 22 11:13:50 2015

Date: Tue, 22 Sep 2015 15:13:35 +0000 (UTC)
From: Martin Gee <geemang_2000@yahoo.com>
To: "kerberos@mit.edu" <kerberos@mit.edu>
Message-ID: <521158560.1492564.1442934815466.JavaMail.yahoo@mail.yahoo.com>
MIME-Version: 1.0
Reply-To: Martin Gee <geemang_2000@yahoo.com>
Content-Type: text/plain; charset="utf-8"
Errors-To: kerberos-bounces@mit.edu
Content-Transfer-Encoding: 8bit

Version: 1.13.2 kerb lib
I'm using the GSS libs to impersonate a user via HTTP SPNEGO (http://tools.ietf.org/html/rfc4559)
I use gss_init_sec_context to get a Token which is sent over to the HTTP service (see spec) in an HTTP Header. This is necessary. 
I'm profiling my app. The gss_init_sec_context is the most expensive call.   I notice that gss_init_sec_context gives you a context handle. 
Is it possible to reuse the context and still get a token? 
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos


home help back first fref pref prev next nref lref last post