Re: Constrained Delegation with certificate and GSS API
Isaac Boukris <[email protected]>
| Newsgroups | gmane.comp.encryption.kerberos.devel |
|---|---|
| Message-ID | <CAC-fF8RqLFPg4GG7--WSV3fjHq7NoWfJP63y8rrf1pOo+B=iqA@mail.gmail.com> |
On Mon, May 11, 2020 at 6:55 AM Puran Chand <[email protected]> wrote: > > I don't see a name type for certificate as per https://web.mit.edu/kerberos/krb5-devel/doc/appdev/gssapi.html#name-types The idea was to add a new name type. > Also as I understand, I need to get rid of gss_acquire_cred_impersonate_cert and instead invoke relevant code from gss_acquire_impersonate_name based on name type. > LMK your thoughts. Yeah, the caller would import the cert data with the new name-type and pass it to gss_acquire_cred_impersonate_name() as desired_name. _______________________________________________ krbdev mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/krbdev