Re: Is there a way to steer kinit to a specific kdc?
Carson Gaspar <[email protected]>
| Newsgroups | gmane.comp.encryption.kerberos.general |
|---|---|
| Message-ID | <[email protected]> |
On 4/5/2023 9:11 AM, Greg Hudson wrote: > On 4/5/23 00:52, Dan Mahoney (Gushi) wrote: >> Can neither mit kinit nor the heimdal one supplied with BSD systems >> by default, not just be forced to a single KDC? > > It can't, and the library APIs don't really enable it. If krb5_init_context_profile() actually did what it said, rather than creating a new profile based on the embedded profile path, it would be easy (profile_init_path(), change the KDC settings in the profile, pass it to krb5_init_context_profile()). As is you have to manipulate internal-only krb5 context struct data to override anything. There was a thread a while ago discussing fixing this API mistake - did it ever go anywhere? -- Carson ________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos