[19464] in Kerberos_V5_Development
App with multiple keytabs
daemon@ATHENA.MIT.EDU (Bradley Kite)
Wed Aug 31 08:14:57 2016
MIME-Version: 1.0
From: Bradley Kite <bradley.kite@gmail.com>
Date: Wed, 31 Aug 2016 11:38:19 +0100
Message-ID: <CA+JxU+479Jr8vwkSWjEZMh224hi5cX6-cUASC+tVJxNZAtrHBA@mail.gmail.com>
To: krbdev@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
Hi there,
I'm quite new to the gssapi, but my use-case is slightly different from the
norm.
I'm trying to write a "multi-tenanted" app where different threads need to
run gssapi functions but using different keytab files (based on the tenant)
- so setting KRB5_KTNAME (via putenv()) is not going to work unless I use
some kind of locking/synchronisation which is going to be horrible for
performance.
I've looked through the docs for some kind of profile or configuration
context that can be passed into a variant of gss_accept_sec_context() but
I've not been able to find anything so far.
Am I trying to do something that is not currently possible?
I'd be glad to hear of any ideas that anyone might have for how to solve
this problem.
Many thanks in advance.
--
Brad.
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
