[19441] in Kerberos_V5_Development
Re: user-to-user counterpart of krb5_server_decrypt_ticket_keytab() ?
daemon@ATHENA.MIT.EDU (Rick van Rein)
Sat Jul 2 03:03:28 2016
Message-ID: <57776736.4060300@openfortress.nl>
Date: Sat, 02 Jul 2016 09:03:18 +0200
From: Rick van Rein <rick@openfortress.nl>
MIME-Version: 1.0
To: krbdev@mit.edu
In-Reply-To: <57775C0E.2070401@openfortress.nl>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
Ah!
> on the server I run into a missing u2u counterpart for
> krb5_server_decrypt_ticket_keytab(); I need something along the lines of
> krb5_server_decrypt_ticket_creds() that would use a TGT (krb5_creds)
> rather than a keytab to decrypt a ticket.
I think I found it: krb5_decrypt_tkt_part() takes a keyblock.
That ought to work!
Sorry for not finding it straight away; I was looking on the web interface,
which doesn't mention it, but I found it in libkrb5.exports, which is the
more convincing place to have it :)
Pfew!
-Rick
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
