[24719] in Kerberos
Re: GSS-API Help..
daemon@ATHENA.MIT.EDU (Nicolas Williams)
Mon Sep 26 10:04:48 2005
Date: Mon, 26 Sep 2005 09:03:49 -0500
From: Nicolas Williams <Nicolas.Williams@Sun.COM>
To: Wyllys Ingersoll <Wyllys.Ingersoll@Sun.COM>
Message-ID: <20050926140349.GA1191@binky.Central.Sun.COM>
Mail-Followup-To: Wyllys Ingersoll <Wyllys.Ingersoll@Sun.COM>,
Eitan <noyasoft@netvision.net.il>, kerberos@mit.edu
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <4337F660.9070405@sun.com>
cc: kerberos@mit.edu
cc: Eitan <noyasoft@netvision.net.il>
Errors-To: kerberos-bounces@mit.edu
On Mon, Sep 26, 2005 at 09:23:44AM -0400, Wyllys Ingersoll wrote:
> Eitan wrote:
>
> > Hi , Is there any method to get the Kerberos ticket parameters such
> > as Flags, Authentication Time, Start time, End time act' by using
> > GSS-API?
>
> Not really. GSSAPI is a generic interface, it is not a Kerberos-specific
> library. Therefore it does not actually have any knowledge of the
> details of a kerberos ticket. All that GSSAPI sees is a generic
> "credential"
> data structure.
You can, however, get the end time of a credential, and you should be
able to get an end time from a security context that relates to the end
time of the credentials used to establish it.
> >
> > My Kerberized application works fine but all I can get via GSS-API is
> > the user name (gss_display_name()) and I want to get the rest of the
> > ticket encrypted information.
>
> You would have to use Kerberos APIs to parse that specific
> information from the ticket.
Unfortunately, if you started out using the GSS-API you may not be able
to get at the Ticket. The IETF KITTEN WG is working on GSS-API
extensions that will provide most if not all this functionality.
Nico
--
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
