[39297] in Kerberos

home help back first fref pref prev next nref lref last post

Trouble Accessing API Credential Cache in C++ Kerberos Integration on

daemon@ATHENA.MIT.EDU (Vincent Le Bourlot)
Tue Oct 31 07:37:09 2023

From: Vincent Le Bourlot <vlb@starqube.com>
To: "kerberos@mit.edu" <kerberos@mit.edu>
Date: Tue, 31 Oct 2023 10:16:44 +0000
Message-ID: <ZRAP278MB00800FE78C5E0C8498F61968DAA0A@ZRAP278MB0080.CHEP278.PROD.OUTLOOK.COM>
Content-Language: fr-FR
MIME-Version: 1.0
Content-Type: text/plain; charset="windows-1252"
Errors-To: kerberos-bounces@mit.edu
Content-Transfer-Encoding: 8bit

Hi,

I’m working on integrating kerberos authentication to my c++ app. I’m developing on macos where the default credential cache is of type API:.
Initializing a credential cache with KCM: results in a deprecation warning asking to use API: instead. My problem in the c++ app is that I cannot find any way to access the API: cache to use the (valid) credentials that are stored in it. The context is always using the KCM cache.
Specifying the default name before trying the gss_init_sec_context doesn’t help…
If I use the brew version of krb5 (which is MIT instead of Heilmdal-apple I believe?) AND specifying the KCM cache, I manage to correctly initialize the security context. Thus my question: is there a way to use the default cache used by the default kinit on macos when coding with the MIT Kerberos and gss api?
Thank you so much for your help.

Cheers Vincent

________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos


home help back first fref pref prev next nref lref last post