[7642] in Kerberos
Re: Kerberos AUTH from a Mac App
daemon@ATHENA.MIT.EDU (John Gardiner Myers)
Mon Jul 15 18:15:42 1996
To: kerberos@MIT.EDU
Date: Mon, 15 Jul 1996 17:54:24 -0400
From: John Gardiner Myers <jgm+@CMU.EDU>
Kerberos is a single-signon system. The user runs a separate
application/driver to authenticate to the Kerberos service. The
various client programs then talk to the Kerberos driver to get
the bits they need to authenticate to Kerberos services.
Just linking in a library doesn't work, since then the user would have
to type their password into every single client application. There
has to be a driver, so the various client applications can share the
user's Kerberos authentication.
There are three major Kerberos implementations for the Macintosh:
AuthMan, KClient, and MacLeland.
Each of the three has its own native API. Some support the API's of
the other implementations.
My advice would be to implement to the KClient API, using any of the
three implementations.
--
_.John G. Myers Internet: jgm+@CMU.EDU
LoseNet: ...!seismo!ihnp4!wiscvm.wisc.edu!give!up
