[491] in Info-AFS_Redistribution

home help back first fref pref prev next nref lref last post

Re: AFS / Kerberos code

daemon@ATHENA.MIT.EDU (Mike Accetta)
Thu Dec 12 13:09:36 1991

To: post-info-afs@CRABAPPLE.SRV.CS.CMU.EDU
From: Mike Accetta <mja+@cs.cmu.edu>
Date: Thu, 12 Dec 91 11:52:22 -0500

In article <121309.9112111733@uk.ac.bcc.ts> ccaamrg@ucl.ac.uk (Mike Gahan) writes:

>2)  A scheme whereby I can use kinit to authenticate with either
>Transarc OR MIT kerbs (ie gets
>    the initial ticket then tries various string_to_key algorithms on
>the password until
>    it decodes the ticket or runs out of ideas)
>

We have fixes to krb_get_in_tkt() and krb_get_pw_in_tkt() in libkrb.a using
an andrew_string_to_key() in libdes.a that iterate over the TGT using
both string_to_key algorithms to do exactly this.   You're welcome to the
former.  I don't know if the latter can be exported.  I think
all that you need to do, though, is make a cover function that rearranges the
arguments from the MIT Kerberos convention to use the AFS library version
of the routine which you presumably already have.

- Mike Accetta

home help back first fref pref prev next nref lref last post