[16484] in Kerberos_V5_Development

home help back first fref pref prev next nref lref last post

Re: X-CACHECONF in cache type 0504

daemon@ATHENA.MIT.EDU (Greg Hudson)
Fri Nov 19 11:21:09 2010

From: Greg Hudson <ghudson@mit.edu>
To: Tim Alsop <Tim@cybersafe.com>
In-Reply-To: <C90C5036.27A07%Tim.Alsop@CyberSafe.com>
Date: Fri, 19 Nov 2010 11:21:04 -0500
Message-ID: <1290183664.2633.1264.camel@ray>
Mime-Version: 1.0
Cc: Weijun Wang <weijun.wang@oracle.com>, Sam Hartman <hartmans@mit.edu>,
   "krbdev@MIT.EDU" <krbdev@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu

On Fri, 2010-11-19 at 11:03 -0500, Tim Alsop wrote:
> So, is this name/realm specific to configuration data for FAST ? What
> happens if a vendor wants to store configuration data for some other
> reason, and not for FAST reasons ? Do they use different name/realm ?

No; in fact, Heimdal already uses it for another purpose (something
called "FriendlyName").  The service principal format is:

krb5_ccache_conf_data/name/principal@X-CACHECONF:

where "name" is an argument to krb5_cc_get_config() and
krb5_cc_set_config().  For FAST negotiation, "name" is set to
fast_avail.


_______________________________________________
krbdev mailing list             krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev

home help back first fref pref prev next nref lref last post