Rocksolid Light

Welcome to novaBBS (click a section below)

mail  files  register  newsreader  groups  login

Message-ID:  

Mirrors should reflect a little before throwing back images. -- Jean Cocteau


devel / comp.protocols.kerberos / Re: How to get Kerberos token for proxy authentication

SubjectAuthor
o Re: How to get Kerberos token for proxy authenticationm_a_n_j_u_s_k@yahoo.com

1
Re: How to get Kerberos token for proxy authentication

<mailman.79.1711309341.2322.kerberos@mit.edu>

 copy mid

https://www.novabbs.com/devel/article-flat.php?id=531&group=comp.protocols.kerberos#531

 copy link   Newsgroups: comp.protocols.kerberos
Path: i2pn2.org!i2pn.org!usenet.blueworldhosting.com!diablo1.usenet.blueworldhosting.com!tncsrv06.tnetconsulting.net!.POSTED.mailman.mit.edu!not-for-mail
From: m_a_n_j_...@yahoo.com (m_a_n_j_u_s_k@yahoo.com)
Newsgroups: comp.protocols.kerberos
Subject: Re: How to get Kerberos token for proxy authentication
Date: Sun, 24 Mar 2024 19:42:07 +0000 (UTC)
Organization: TNet Consulting
Lines: 72
Message-ID: <mailman.79.1711309341.2322.kerberos@mit.edu>
References: <1182031369.5745575.1710653866918.ref@mail.yahoo.com>
<1182031369.5745575.1710653866918@mail.yahoo.com>
<202403180011.42I0Bfq8004419@hedwig.cmf.nrl.navy.mil>
<1971540388.4984456.1710851301228@mail.yahoo.com>
<202403200124.42K1Ogwb031014@hedwig.cmf.nrl.navy.mil>
<1607837619.5406090.1710931234295@mail.yahoo.com>
<202403201533.42KFXFYr006534@hedwig.cmf.nrl.navy.mil>
<ZfxRGUGVIIXJ42x+@gozer.tproa.net>
<05320bda8e2e16ad5268d7b2b2c87ad372c7871d.camel@redhat.com>
<1776768013.767181.1711309327191@mail.yahoo.com>
Reply-To: "m_a_n_j_u_s_k@yahoo.com" <m_a_n_j_u_s_k@yahoo.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Injection-Info: tncsrv06.tnetconsulting.net; posting-host="mailman.mit.edu:18.7.21.50";
logging-data="5668"; mail-complaints-to="newsmaster@tnetconsulting.net"
To: Thomas Kula <kula@tproa.net>, "kerberos@mit.edu" <kerberos@mit.edu>,
Simo Sorce <simo@redhat.com>
DKIM-Filter: OpenDKIM Filter v2.11.0 unknown-host (unknown-jobid)
Authentication-Results: mailman.mit.edu;
dkim=pass (1024-bit key, unprotected) header.d=mitprod.onmicrosoft.com
header.i=@mitprod.onmicrosoft.com header.a=rsa-sha256
header.s=selector2-mitprod-onmicrosoft-com header.b=HoqHKkiX;
dkim=pass (2048-bit key,
unprotected) header.d=yahoo.com header.i=@yahoo.com header.a=rsa-sha256
header.s=s2048 header.b=pCQLs7Zn
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=mxLX5vA+ZPGODxIjD9dp6AZoI9eMWWph/47XGREvovG1kXOdk1sLz+8cbvBrU4oLTHvCGQK7Ke81g5GGWhXCGbMOkddFSgMg9AzJRv7QYqvsPbaJImnos4hkwEzz32YH7iBMVWE0Ak3CBnCoopkWbOA51Fa8JhANW67iaclif87NDMAo2huqV+dfCjNKGQXpUshOyhzY2b5+teN2WYWpT00ddbQj/Lkai8mK/OkaCdUBCxFoIG7s7FjoapEkFgqzZikHYB4EvbDNSZLAyfRNpX2ZHgs6Zv4S7X68fUky66RFSMQA7dYzjVMkI/Ckf4si9qxdtccF2SqeLQIcMTyW7A==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=e9IZVDjeeETF5q1oxipc0l5X8oJGeiURSvOsSBaO6IA=;
b=GGDauMX2+I+jvx0kUQadh8cch8c7rjhfUqDTlegYbokoUJd4skBXqjzMsD4TYgQ0/zrRfSQI7GDxuD6HRu1dSmS0kb6x7+/A6jrGk6TY4KUiPGcfcVluYYuDHVjGg3/tCcEndm4oB4nVN5vbgqapniLX1njPcRmZSH5wOmbmTgTkwQdQHNJz07xuhpZlZvJK8V4CUTEQi3O1z0aCd5bnflFyIbHRZe0vCb6BAmigwcVaze+qIT/86YCNXvPNRs7ro27JDr8t7Psb/oqCJwTfHq4dF2n4JqTd4962eAopuG7nogAN3VtcSE4eHznRO9Dd5bAgcH5/wNqI4itHxWInLw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is
66.163.184.43) smtp.rcpttodomain=mit.edu smtp.mailfrom=yahoo.com; dmarc=pass
(p=reject sp=reject pct=100) action=none header.from=yahoo.com; dkim=pass
(signature was verified) header.d=yahoo.com; arc=none (0)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=mitprod.onmicrosoft.com; s=selector2-mitprod-onmicrosoft-com;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=e9IZVDjeeETF5q1oxipc0l5X8oJGeiURSvOsSBaO6IA=;
b=HoqHKkiXYRXEOSgsQm+HC3CxCyXgP+08mTkc9V4v+9bvV3bybXPkG+8f2i1xTJc8H5I8OeOCPUsRKAIvRliH/3t8lZ5JWF6uVMvF5RO7y/WArrEXuLHhI7GuoZAM2pm3tB33XktaV9WXsYx019ezlaviNe8rBUa9fnbq8oAgr48=
Authentication-Results: spf=pass (sender IP is 66.163.184.43)
smtp.mailfrom=yahoo.com; dkim=pass (signature was verified)
header.d=yahoo.com;dmarc=pass action=none header.from=yahoo.com;
Received-SPF: Pass (protection.outlook.com: domain of yahoo.com designates
66.163.184.43 as permitted sender) receiver=protection.outlook.com;
client-ip=66.163.184.43; helo=sonic317-32.consmr.mail.ne1.yahoo.com; pr=C
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048;
t=1711309336; bh=e9IZVDjeeETF5q1oxipc0l5X8oJGeiURSvOsSBaO6IA=;
h=Date:From:Reply-To:To:In-Reply-To:References:Subject:From:Subject:Reply-To;
b=pCQLs7Zn7cgcghbUUldu487/IV5qzCmzEeBbpIlMV1pxw/bT4g7pTJTyrGYpxSBqS7mSOd93bGuuzGW3JkZy9AB4zr25B/vWB1/ZKI8nsCdi4piVXlq4V7CGIjx/V9cccthY3+YFyuXscgJ0bTJ1MVf1mTpAEqOQ0s7PuiChq+lrpH9OIAPivI1P2vvEcHldfpWzKOlGKpRMc7/PrSFciv5NEmMxMMhrCty7BHlwGAn6HZv2zgyLQSWGu9qzmuhs8vYWhVG3n9xqVcSAryVxJilzmMl7+qS6Pb7WaCDXloByT+EFp/XZO7Ruotu8HeEPvUYRlAENV1+yDgBcowr0Mg==
X-SONIC-DKIM-SIGN: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048;
t=1711309336; bh=0WSB1E+DUZZV+3ahoO9/CKrMH6d/sm5gl2RBHhk7Myg=;
h=X-Sonic-MF:X-Sonic-MF:Date:From:To:Subject:From:Subject;
b=hTJLqfUqvRQsvx3jHQmqHcVda8dr/pwS3ciyfp2fI1KeUMt526GkHy6PiSRCqM9dUv2ZcPjHfASP0CQhVE0VX/o/nZ2KFmzOXr6fi4flY44G7rtXYi5nNHBVDLFLacWhywjBDxCC0JpgNifWLHPm3VyJkeQhXTV/HPIWc2lklcKwlKh0znUzr0tg1raTMrGRil4+aUEa7LfWaVXR6XE9XBkfaXY88sh+f04Xp5ogxHOxei/b4SMJkv+yFP2AQX2BKpJWtzQG8L4Ci3lMPV1kDsBlMQmihunc3LFptbq4tTOl1DOUskACIh1kWon3fR2WXZqM6mIqOesiySPqkKrd0A==
X-YMail-OSG: Y1X9HWIVM1nSho_ieDoRkB0jJqAUWU5vlWQ2m38p9x2tfSB8E7M8OnuGqInJjrY
PcJEHmRPjJAxyYz8kbMIujaDyskXgbrallN3Rmn.Vt5vIQVlx5wOZB3BWmdHxH8b9hIvBSApYeZM
xhH2_ISLsuIFLTdojHtX1TdZIrk1BFnzdnpf7pOWCdX92MEWeY3j2NDJBfBUgIfc7Pj1FE4jkJmW
R8oukytqq4GOn5w_Zn43I7vm1ch5G3pNs7YPnYLtv8aKomDugFpaPJY9EwcnRwCclTfG4aDnOGdh
vd4PpkL._l5iusu0ziNdfbTkgQ.YqaLcfNWuGCneFh44h8Pint.LuRLEgosbx7FScKQYm4eRDbej
NCILaEAc44dd.3g0fgT.cKULfhaG1VqySk.GpJZnh9Vb5Z0s0BNuMVtO3aMs6BgG9E3DoDMde8LB
OTuWJuAm233BhDsmbbrE3Cwc7yORKVZKDDbZ4V5j8rSJs5gRByQWrS7X0yPp9kUgOvMknncCOscv
I_WBVEcuErcIjiPrctb8xNPFR9GTwmNKQYcNlZlSP8QUe8Wf4tXeAipi44kSbJ5fvAz62qqL0cFV
a7a.yPvbBVMM4P6ZRBGCgn_VXxJd_MZbJ98FpaaKx74H9uRCKw5b.fcRNqduyQwDdikaDnISCUWO
zQWv6xhNkkpyJpYUSnlPsh_KWwDaHcKdiFTpEGYOPR25WEy53cSGqSO2lqZL4kEFIas.Q_xt8r2j
CglJyH1vepZZkEdpUEcl2TqlaZkfHU.IZAIJ4kvo1xSLQuufs1EQkCXGJ2B4IRWEnr8IG4K1Hftk
0tf_UgCgMhcqhFO1InMEGqNcDbJdLUrD9at8_52qeyTGa.oXYsSBbfdd6fmA7x1JlcOjfhWZn2t2
6xDd8P0vYDUx7DmInzHZ9F08s6isFnd.9XhGzRCyk9uTjzBTlnGODIEPr5tlX1efBw0DdR7.eKt4
zbKdy.6czykkf2XjuwudBZdqf8xY2UTUoJILCpGt85gcBysGcejt_xPZdV9HNFwTk9xq5uxrcmg9
oEqtDeVfgSeeSwqgDvc9l5OAEex2L7dI2KC00L1vlS.XPrDAbY3ER5uE5Y_DnUg8WD8TdnMFHbTn
WAgm8oKBSClRMCnNvSmfpr3coev2zUdFFzCCGMi9Kf9vKITeJUSeDzjmlJJvgI7Cd28YmVt3izwl
Sj8mmyZ8DyfcsNIizdKjLmoN4LaRiqBDLkWQAdsYkOQjP5xXBL5DUjOXWn7M.z842hQ27ZlZAStw
bjnKhJuiOsKftDFp4tVWvsHGV9h5oXkAOSFVHG_IDe5Bf9JQ.isKho_wd4x.yqG2zeaj4EHliY5A
mtqYBzLa1ISDLatbxTorBTqDcZ_A10LH4IYPJKwUrMyyokO76_EL80cjYA8SdBQYOy8j55NVQPTY
n0FRa2ESEj1uZnX6wOhYePlWD6N6hzsFb1QUb1f3EhA6kWf_WoAj5ElWNQ3CcdburWbuIBafDo4U
ewUBaiv.OAkWZxoc1eWNGQEe6rBOnwbbz0QC6vwjYjOgKskaeIZBJlUmfr_Ivdv1Yo7IIaqy5UZH
R7q3cIdhcm_bMes6UNcIG0GaKmS2CIWmQWaZT5huSWa_iAWQFp5YNTcyWBB8Dq2FBZ3nr1Q6nH.B
TrMl67WJj6utuP38fMB_MaV7t4t_TVJ7ycZ0Or7qziCNOpBEsGHfhdkiOP_2.lEdpzc1otV.8xWz
CNz3PcR7CWzj_HxHrNlMHIfp6IMFP7wJ8f3fYoeZmGT77oo5EG9l0xUqbLq7UBdpfwmSvVDlMxKB
GxThAumcQlQgTv.UC9ZtnFgMu4PQ1z9WVjsQxOW4BlWyI_EjlEyq8ftAoYnb6StSFYeJn.iLPVlF
Z.BIf2rg8maJtFsrgwKVTpyQ5wbc6ZWU3mAOQ9dTr_XkrrGtxpU5bEjat3cTr1Yfc.iryXiLvJsv
o92LCzmdzGQ.IGvFbt8tkNo30snnMws4WVk6KnCkaZFLdeDYonPyjpRHAuhYmM2A6m8E97A51Jkt
JRUklPaOZKCcKfJ2aW9mrtrxoKEoWf8oL3klaXNKx5B5SU3m_8AOurjMveg_rSZdkSdLUx9h5_RW
aKdnIiYrLcACcPNDILu4J7B.MHMUoWKo14g8L1eoGmGa98jgTrEqNEO2gtXDDW2vqwupxr8mjWLY
XmZZfnuS96cTBwX6sr888wTyPdQseQyUPNtFmR5LIaTjOB_rF0RWodSDMacnVyo7loco6g.Sy2wq
iognHmEQ3C54bymhRdx6IAvb__MsYX6.CPt0yuu2iEHZDTIaGlB32VV_o66.DHDiTdOo4bpCMBjK
tteX6GTvN7r91k6FhR6_K6WKJYBbJiWfmA6CCyVKmWM3qZrTtnhWfzNiHcG12ISI-
X-Sonic-MF: <m_a_n_j_u_s_k@yahoo.com>
X-Sonic-ID: 2a14ca5f-e211-441b-985b-bac59f0a51ec
X-YMail-OSG: xFTQGVoVM1lt8HWnevuucKR5CaEcYrHRmMs7Jz9NEyCMQvenq6tqw9RIoLJTRd6
McbR7aclNkHWEJd8gbiYehw7YTfeWWWixV3IbUX8Qre0j77XGUgvnUCokrS4qc1KDTN_tj.cQEVh
9rg.wa4T9aXcTRcGoGvqa7AiFnOjOOBADXECHlro2Z1GgZrucoYRlaQ8EJqqMKmnZfgYI_yJZXZH
a3G6C9xnl05cbsfmvdC1Y.0NFORWawxKrSdPTf2nDMgsDVeauEnO.htDFF_NTeeM91UAFZ5ukDVJ
C5r9nGA5AexPm9tQozxvJxhT4CcsV.YB2BkWlgwRMESTGiNdHkH8W1OpGtLIJsfecgzg0ymjjVSz
2rIRRvTpuS.Yt_GauAIhKpF8VcebXUvzLGrUnzFfclMQAWdqLnhfdhBkwYvFzdwG.OqPgTIf0Xs5
NeIiuLhlPxj.Ieh9ZqT.uTDeJNzIp7J5bBAcR3UsJmjs_T0n.It48S.HDZHF8M9X.k5QBe_sCfjc
uqUIaQ7hhkf7iUVR.Z3M0v0m50ngA1_F61boM7xsMqsNnnXoeZo_Xt2YTlzmDzPHCs6VRP_l3gf.
xxN7JANT5AA_K3Jp3EXyMmN64aer1hgjSWuqYrh_kuODkFFNWSnPqH4wwOM0SFTQ84HKupL8K0C5
Qz0S2m2tapb5k3Z3bfiM9T46b9.Vtv8nObBsBBuOGB.KdypVsTXzEOH_obTS7OXfyl_KWkeVuxHB
DVPqtMw5gIofyI3RxZqo8vXhAa0VyW6vE7mLbcu6iqQDDZKpdPmRvkbZxyx1zI.ppjro0pZD57e0
8_w8NzVMWSryHGHC7tnbrkqGqqW.moV3icfB33RXB.6wAwDkG.YUktM2WgN3qLBL6zW5So7riy.O
RSt4zGi2UlHV9vDGPZx8SI97BAFDFC29i38FrAk1beNpNkYQ3Tw1ODi2AYLCUg5KNNvHbyqiMs7G
kYXkwe5NCyexJiSU9bpMC2jMrBssTx7IFIKx.7bgcI7qIkrgU2dwDOC4kRNSsbr1EwPcelZ80TKm
A0IiWVzjITt.vqUe2YiOUhMaBbny9B01vVNEkHitryvo9pAjbbM9HaSetpoP19wuuP0CI5f6UyJ.
sNvQ0Mg19zEXLR5.YQPNGbADmqHUVpidv8ScWUfbDsKkS6MqyyjZQw9DSvXVsgU0yb2utVZkKqqW
4U8dRH84pXCZo2HMavFSQhsVMm.WvF7VbLLpDypQnMu.xNHZHNYZ0mSLU0E5iMHXvNhzerlQO5Gd
kL3BL9y4PBDIcd0IkzKvX6j34RMJk2Bdqn9hYzXzVfosa1zAvDkl_kjaQLOcdzfBhTIzHDCW0tBg
1_0Ju7Vs5108sM7RjHrnENWJBy2NM0ogfY.BScgjkJcfap9ENOCPNsBsMu9p5.Z.ABMEyzJHzgRE
EDotpTVguBJ0eFjZjHQ1s0kzbHrK0lGBII1VsBAGzfR7Thrvh1I73v.NLCW9Mx5t87v0vDOSyl2H
8H0nTSu4R6BV_DIfOgwKZ9Au.PETEbd8xj_Vt48iLH2jezJwbb8kPp9TbLd7L.jeCG8kWsUAIFC9
9RpdEKox4EGpxJM6mooxrNWkYAUnQRwArVNHZ5TJiA9cWpDfDv9SMwa9zMqoT2dT_L_LM2E_raYx
wS3xHfxIbgfc3Ctuq7sjrCxdiwOkFFi82vDBP9NWTwKZpN6E6k1rym7ZAcQkVv6CTRZmpBdbXsCq
2Fa7iUZlN46QdK64E3kU1.ic4mbl8EFpcbFaEYJ9qaziPle94ZafkZ77tBrfqwKF1ToHmYra5I_S
7Vmx3TgccX9kw_7qFWYFIw3zBhugHxqCcZOZ4y6P8zUqCd5vetjOibu5Ytyg_h5wm44K9Kkhm3t9
jpHjA0mLcnbpo8GVQJMJSyGHMqEypvjn8EzEX.4YXVEsNwuF3S1ukmnWyMzKzPOD60YqN0Nvzguw
1qjjdXeLpdh7p7QeFK1cbMmQgb_Do2KkL4JG03pDy7zRn0UOd5Vn141iTQ_o_x1DILDawXnX7anW
4oTgLKoENSwk60xuU4EtVbv6twPZfHNd7xLICT9.ZlVfH2AQYU_CjDVyPi.pKtxrhL3N6eBgLoii
hdivNG_X8iXxP2he4xbNWdN7xQyOf2tlyiwvx.U1mReMot8wDuQiNuDcY2iU4OvUU_ElTKRMas5_
ODGdjsrj1L5XnMeheCwS3R1XdPMQHSAzSlAKBzTbk6eAFWpd7VHUmJ8oe_QeF23vBb0R4dGg040w
zqIUBo5UN4OBQdlZ3SVb9bGeyVRdWrQcrdHQniqNcbORbkkKueYgGOAGg6tIx27TaWI4DDEriqFT
Bkh4tZhqggYx6uAn02sDdKM_sb6LoWb0LufStwwa0R9vu93SaStrzLtNkWXWhspZVVaGREFuhdiV
ROXKNCdMMpJhtIuDSU._Tkwt_o5dXraxat96L5v4E2DyUo1oitxQ-
X-Sonic-MF: <m_a_n_j_u_s_k@yahoo.com>
X-Sonic-ID: c5fa28d5-a390-4d8d-b563-2170924cd9ad
In-Reply-To: <05320bda8e2e16ad5268d7b2b2c87ad372c7871d.camel@redhat.com>
X-Mailer: WebService/1.1.22205 YMailNorrin
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b:0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: MWH0EPF000A6733:EE_|SA1PR01MB6768:EE_
X-MS-Office365-Filtering-Correlation-Id: 56e597ab-b6d4-46d3-f3b1-08dc4c3a8309
X-LD-Processed: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b,ExtAddr
X-MS-Exchange-AtpMessageProperties: SA
X-MS-Exchange-SenderADCheck: 0
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: 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
X-Forefront-Antispam-Report: CIP:66.163.184.43; CTRY:US; LANG:en; SCL:1; SRV:;
IPV:NLI; SFV:NSPM; H:sonic317-32.consmr.mail.ne1.yahoo.com;
PTR:sonic317-32.consmr.mail.ne1.yahoo.com; CAT:NONE;
SFS:(13230031)(376005)(61400799018)(48200799009); DIR:OUT; SFP:1102;
X-ExternalRecipientOutboundConnectors: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b
X-Auto-Response-Suppress: DR, OOF, AutoReply
X-OriginatorOrg: mitprod.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 24 Mar 2024 19:42:16.7705 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 56e597ab-b6d4-46d3-f3b1-08dc4c3a8309
X-MS-Exchange-CrossTenant-Id: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b
X-MS-Exchange-CrossTenant-AuthSource: MWH0EPF000A6733.namprd04.prod.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: SA1PR01MB6768
X-Content-Filtered-By: Mailman/MimeDel 2.1.34
X-BeenThere: kerberos@mit.edu
X-Mailman-Version: 2.1.34
Precedence: list
List-Id: The Kerberos Authentication System Mailing List <kerberos.mit.edu>
List-Unsubscribe: <https://mailman.mit.edu/mailman/options/kerberos>,
<mailto:kerberos-request@mit.edu?subject=unsubscribe>
List-Archive: <http://mailman.mit.edu/pipermail/kerberos/>
List-Post: <mailto:kerberos@mit.edu>
List-Help: <mailto:kerberos-request@mit.edu?subject=help>
List-Subscribe: <https://mailman.mit.edu/mailman/listinfo/kerberos>,
<mailto:kerberos-request@mit.edu?subject=subscribe>
X-Mailman-Original-Message-ID: <1776768013.767181.1711309327191@mail.yahoo.com>
X-Mailman-Original-References: <1182031369.5745575.1710653866918.ref@mail.yahoo.com>
<1182031369.5745575.1710653866918@mail.yahoo.com>
<202403180011.42I0Bfq8004419@hedwig.cmf.nrl.navy.mil>
<1971540388.4984456.1710851301228@mail.yahoo.com>
<202403200124.42K1Ogwb031014@hedwig.cmf.nrl.navy.mil>
<1607837619.5406090.1710931234295@mail.yahoo.com>
<202403201533.42KFXFYr006534@hedwig.cmf.nrl.navy.mil>
<ZfxRGUGVIIXJ42x+@gozer.tproa.net>
<05320bda8e2e16ad5268d7b2b2c87ad372c7871d.camel@redhat.com>
 by: m_a_n_j_u_s_k@yahoo. - Sun, 24 Mar 2024 19:42 UTC

Thank you. Yes, as suggested here, I am looking into using ether MIT or Heimdal Kerberos implementation.

On Friday, 22 March 2024 at 10:05:38 GMT, Simo Sorce <simo@redhat.com> wrote:
On Thu, 2024-03-21 at 11:24 -0400, Thomas Kula wrote:
> On Wed, Mar 20, 2024 at 11:33:16AM -0400, Ken Hornstein via Kerberos wrote:
> > > Thanks again Ken.  My application is written in Go. So I'm looking
> > > for Kerberos implementation that can be easily integrated with my
> > > application. Hence I  was considering MIT Kerberos and using C bindings
> > > to call those APIs from my Go code.  "MacOS X it might be easier to use
> > > the native GSSAPI implementation which would be Heimdal"
> > >
> > > Here did you mean developer.apple.com/documentation/gss ? Isn't that in
> > > Swift ? I will explore libcurl code thank-you.
> >
> > I can't speak for the Swift API, but Heimdal on MacOS X also provides a
> > standard C API for the GSSAPI functions.  I don't have much experience
> > with Go but if you can call C functions from within it (and I have to
> > believe that is possible) then doing so for Heimdal should be fine.
> > There might be a few differences in term of what GSSAPI extension
> > functions are available but from what you describe you should only need
> > the standard GSSAPI functions.
>
> Are you familiar with https://github.com/jcmturner/gokrb5? I've used it
> in the past with some experiments in some Go code I was working on, I
> wasn't touching GSSAPI but there's at least some GSSAPI code in there.
> Might be worth checking out as it's native Go code, no cgo wrapping.
>

Last time I checked that code was kept together with spit and tape, and
was far from what I would consider usable in production for general
use.
It implements the minimum set of code needed for the specific use case
and specific file credential of the person that built it, and will fall
apart as soon as you do anything funny.

There is also no guarantee it is secure.

As much as I understand the desire of new languages to have "native
code" I strongly suggest to avoid the urge in this case. Both Heimdal
and MIT Kerberos have decades of development behind them, not something
you reproduce in a "summer of coding".

HTH,
Simo.

--
Simo Sorce
Distinguished Engineer
RHEL Crypto Team
Red Hat, Inc

________________________________________________
Kerberos mailing list          Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

1
server_pubkey.txt

rocksolid light 0.9.7
clearnet tor