[19442] in Kerberos_V5_Development
Re: user-to-user counterpart of krb5_server_decrypt_ticket_keytab() ?
daemon@ATHENA.MIT.EDU (Greg Hudson)
Sat Jul 2 11:11:04 2016
To: Rick van Rein <rick@openfortress.nl>, krbdev@mit.edu
From: Greg Hudson <ghudson@mit.edu>
Message-ID: <5777D979.7020906@mit.edu>
Date: Sat, 2 Jul 2016 11:10:49 -0400
MIME-Version: 1.0
In-Reply-To: <57776736.4060300@openfortress.nl>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
On 07/02/2016 03:03 AM, Rick van Rein wrote:
> I think I found it: krb5_decrypt_tkt_part() takes a keyblock.
> That ought to work!
>
> Sorry for not finding it straight away; I was looking on the web interface,
> which doesn't mention it, but I found it in libkrb5.exports, which is the
> more convincing place to have it :)
libkrb5.exports is the library export list; it contains functions which
are exported for the sake of test programs, or the GSS-API library, or
the KDC. Not everything in there is a public API.
krb5_decrypt_tkt_part() is not prototyped in krb5.h, so it is not a
public API.
You don't need to explicitly decrypt the ticket in a user-to-user
program; rd_req will take care of it for you. Have a look at
src/appl/user_user for an example.
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
