[24737] in Kerberos
Re: GSS-API - Kerberos Ticket
daemon@ATHENA.MIT.EDU (Kevin Coffman)
Tue Sep 27 16:55:30 2005
To: "Eitan" <noyasoft@netvision.net.il>
In-reply-to: <1127816679.029323.153760@f14g2000cwb.googlegroups.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Date: Tue, 27 Sep 2005 16:54:40 -0400
From: Kevin Coffman <kwc@citi.umich.edu>
Message-Id: <20050927205440.957471BB9C@citi.umich.edu>
cc: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu
> Hello,
>
> Is there any method of "extracting" the Kerberos key from a GSS ticket?
>
> Microsoft sends the Kerberos ticket (SPNEGO over http) using the GSS
> methods. If one attempts to handle the internal Kerberos ticket
> information (such as the case of the PAC data) he will have to use the
> Kerberos ticket.
>
> Any idea?
> Any explicit function I've missed ? such as
> gss_extract_krb5_ticket()..?
In 1.4 MIT added gss_krb5_export_lucid_sec_context() to obtain
information from the negotiated context. (This is a mechanism-
specific routine currently available only in the MIT distribution
AFAIK.) Is this close to what you are looking for?
K.C.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
