[33700] in Kerberos
Re: any non-krb5int way to pass a keyblock to get_init_creds?
daemon@ATHENA.MIT.EDU (Chris Hecker)
Mon Aug 1 23:59:01 2011
Message-ID: <4E3775F9.80605@d6.com>
Date: Mon, 01 Aug 2011 20:58:49 -0700
From: Chris Hecker <checker@d6.com>
MIME-Version: 1.0
To: kerberos@mit.edu
In-Reply-To: <4E3730E7.1060502@secure-endpoints.com>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Yeah, it seems like a kind of cool addition to the kerberos toolset. I
was bummed to find the project hadn't been updated since 2005. I
emailed the Fermilab people, who hacked on it a bit but never released
their changes, and the guy there said they might throw it up on github.
Chris
On 2011/08/01 16:04, Jeffrey Altman wrote:
> On 8/1/2011 4:58 PM, Chris Hecker wrote:
>>
>> I was also looking at kx509, but that
>> project seems a bit moribund, and even so it seemed like more work and
>> heavier weight than just setting up mod_auth_kerb and hacking up an
>> SPNEGO token wrapper for a krb5 ticket[*].
>>
>> Chris
>
> kx509 support is built into Heimdal and Secure Endpoints provides a
> kx509 (aka KCA) server for Active Directory and a plug-in for Network
> Identity Manager on Windows.
>
> Jeffrey Altman
>
>
>
>
> ________________________________________________
> Kerberos mailing list Kerberos@mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
