[19437] in Kerberos_V5_Development
Credential Cache for multiple client principal names
daemon@ATHENA.MIT.EDU (Rick van Rein)
Wed Jun 29 10:15:29 2016
Message-ID: <5773D7EF.5020304@openfortress.nl>
Date: Wed, 29 Jun 2016 16:15:11 +0200
From: Rick van Rein <rick@openfortress.nl>
MIME-Version: 1.0
To: krbdev@mit.edu
Cc: Tom Vrancken <email@tomvrancken.nl>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
Hello,
I'm trying to create [1] a mechanism to be used from multiple client
principal names, each with their own service tickets. Secure separation
between the identities is not an issue.
It is not clear to me how to do this. I suspect I should use
DIR:/var/mytool and perhaps KEYRING: on Linux, but it is not clear if
I'm supposed to read and write tickets (including krbtgt) for various
client principal names in the same cache, or that I should instead
iterate it as a credential cache collection, and prod each credentials
cache for the (default) client principal name and add a new one to the
collection if I need it.
Can you help me, or perhaps show me some examples that do this?
Thanks,
-Rick
[1] I'm working on a "TLS Pool" daemon [2] that takes TLS logic away
from applications and that will incorporate a mode for Kerberos [3].
[2] http://tlspool.arpa2.net
[3] https://tools.ietf.org/html/draft-vanrein-tls-kdh-04
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
