Re: Alternative proxy-creds API for constrained-delegation

Nico Williams <[email protected]>
Newsgroups gmane.comp.encryption.kerberos.devel
Message-ID <20200605144740.GG7856@localhost>
On Fri, Jun 05, 2020 at 12:11:44PM +0200, Isaac Boukris wrote:
> Actually, even with the cred_store option for delegation_policy, when
> using more than one type, one can't really tell what creds he got at
> the end.

You need to know?  Why?

Anyways, gss_store_cred_into2() gives us a way to get that.

Also, maybe we need a gss_cred_get_store() function to return a
cred_store description of where the cred was acquired from or last
stored.  (No need to release this.)

Nico
-- 
_______________________________________________
krbdev mailing list             [email protected]
https://mailman.mit.edu/mailman/listinfo/krbdev
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.