Re: Alternative proxy-creds API for constrained-delegation
Nico Williams <[email protected]>
| Newsgroups | gmane.comp.encryption.kerberos.devel |
|---|---|
| Message-ID | <20200605144740.GG7856@localhost> |
On Fri, Jun 05, 2020 at 12:11:44PM +0200, Isaac Boukris wrote: > Actually, even with the cred_store option for delegation_policy, when > using more than one type, one can't really tell what creds he got at > the end. You need to know? Why? Anyways, gss_store_cred_into2() gives us a way to get that. Also, maybe we need a gss_cred_get_store() function to return a cred_store description of where the cred was acquired from or last stored. (No need to release this.) Nico -- _______________________________________________ krbdev mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/krbdev