[15722] in Kerberos_V5_Development
Re: krb5_get_in_tkt_with_password -> gss_init_sec_context()
daemon@ATHENA.MIT.EDU (vir vir)
Wed Apr 28 17:00:44 2010
Message-ID: <490444.59851.qm@web50105.mail.re2.yahoo.com>
Date: Wed, 28 Apr 2010 14:00:41 -0700 (PDT)
From: vir vir <vitrou2004@yahoo.com>
To: Greg Hudson <ghudson@mit.edu>
In-Reply-To: <1272421212.19726.280.camel@ray>
MIME-Version: 1.0
Cc: "krbdev@mit.edu" <krbdev@mit.edu>
Content-Type: text/plain; charset="iso-8859-1"
Errors-To: krbdev-bounces@mit.edu
Content-Transfer-Encoding: 8bit
What I want to do is call this function twice
by saying thread-specific variable
gss_krb5_ccache_name()
then gss_acquire_cred().
then krb5_ccache_name() to switch back to the old default path
by thread-specific variable what do you mean
if I set
funcA()
{
krb5_lock();
gss_krb5_ccache_name() ;
gss_acquire_cred().
gss_krb5_ccache_name() ;
krb5_unlock();
}
what if another function funcB() runs gss_krb5_ccache_name() from another thread ; will it be thread save?
will this path be change for the current thread only?
Thanks,
Alex
--- On Tue, 4/27/10, Greg Hudson <ghudson@MIT.EDU> wrote:
From: Greg Hudson <ghudson@MIT.EDU>
Subject: Re: krb5_get_in_tkt_with_password -> gss_init_sec_context()
To: "vir vir" <vitrou2004@yahoo.com>
Cc: "krbdev@mit.edu" <krbdev@mit.edu>
Received: Tuesday, April 27, 2010, 7:20 PM
gss_krb5_ccache_name() will set a thread-specific variable which
determines the ccache used by gss_acquire_cred().
gss_krb5_acquire_cred_ccache() appears to be an IBM creation; it's not
in Heimdal, and Google has only five matches for it.
On Tue, 2010-04-27 at 15:26 -0400, vir vir wrote:
> Hi,
>
> I am trying to get a credential cache (krb5_ccache) using the functions krb5_get_in_tkt_with_password() or get the credential handle (krb5_creds)krb5_get_init_creds_password() and then use this credential in gss_init_sec_context().
> I find out that there is a function call gss_krb5_acquire_cred_ccache()
> allows an application to acquire a GSS-API credential using a credentials cache.
> but MIT doesn't support this function.
> Do you know how I after I am getting the credential for the "password" function I can use it in gss_init_sec_context().
> Thanks,
> Alex
>
>
> _______________________________________________
> krbdev mailing list krbdev@mit.edu
> https://mailman.mit.edu/mailman/listinfo/krbdev
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
