[24718] in Kerberos

home help back first fref pref prev next nref lref last post

Re: GSS-API Help..

daemon@ATHENA.MIT.EDU (Wyllys Ingersoll)
Mon Sep 26 09:26:28 2005

Message-ID: <4337F660.9070405@sun.com>
Date: Mon, 26 Sep 2005 09:23:44 -0400
From: Wyllys Ingersoll <wyllys.ingersoll@sun.com>
MIME-Version: 1.0
To: Eitan <noyasoft@netvision.net.il>
In-Reply-To: <1127654033.102957.106990@f14g2000cwb.googlegroups.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
cc: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu

Eitan wrote:

>  Hi , Is there any method to get the Kerberos ticket parameters such
>  as Flags, Authentication Time, Start time, End time act' by using
>  GSS-API?

Not really.  GSSAPI is a generic interface, it is not a Kerberos-specific
library.   Therefore it does not actually have any knowledge of the
details of a kerberos ticket.  All that GSSAPI sees is a generic 
"credential"
data structure.

>
>  My Kerberized application works fine but all I can get via GSS-API is
>  the user name (gss_display_name()) and I want to get the rest of the
>  ticket encrypted information.

You would have to use Kerberos APIs to parse that specific
information from the ticket.

-Wyllys



________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post