[20077] in Kerberos_V5_Development
Constrained Delegation with certificate and GSS API
daemon@ATHENA.MIT.EDU (Puran Chand)
Wed May 6 00:25:45 2020
MIME-Version: 1.0
From: Puran Chand <puran157@gmail.com>
Date: Wed, 6 May 2020 09:55:25 +0530
Message-ID: <CAKnEmRK_KdfRVq8WfVH32WDK5iUXrUvO2CpGii1jrBPiea4rsg@mail.gmail.com>
To: krbdev@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
Hi,
I see 'gss_acquire_cred_impersonate_name' should be used to obtain
impersonation token on behalf of user and the API expects
User-Principal-Name 'gss_name_t' as input to identify the user.
I was wondering if there is similar API to perform same with
user-certificate this time instead of UPN.
I hope it should send a AS-REQ with PA-DATA P4-S4U-X509-USER with
certificate (with my limited knowledge).
If there isn't any API, I would be happy to work upon this.
Let me know where to start.
Thanks
-Puran
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev