[18813] in Kerberos_V5_Development
Re: create krb5 context without config files
daemon@ATHENA.MIT.EDU (Benjamin Kaduk)
Tue Jun 10 23:21:44 2014
Date: Tue, 10 Jun 2014 23:21:33 -0400 (EDT)
From: Benjamin Kaduk <kaduk@mit.edu>
To: Bin Lu <blu@paloaltonetworks.com>
In-Reply-To: <841A051D8BD4144AA7B5AC63D97F9F05B1FE68@sjccmbxpw01p.paloaltonetworks.local>
Message-ID: <alpine.GSO.1.10.1406102317460.25244@multics.mit.edu>
MIME-Version: 1.0
Cc: "krbdev@mit.edu" <krbdev@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
On Tue, 10 Jun 2014, Bin Lu wrote:
> Hi,
>
> Is there a way to create a krb5 lib context without using any config
> files, include /etc/krb5.conf and files set in environmental variables?
> Assume the realm/domain and kdc server info is already available.
For this I think you need to use krb5_init_context_profile(), with a
profile derived from profile_init_vtable() (see <profile.h>).
I see that your previous message did not get answered, but it looks like
if you are asking this question, you have gotten past it. I will note
that the server doing password verification will need to have kerberos
credentials of its own and take care to avoid the Zanarotti attack.
-Ben Kaduk
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
