I'm just starting to delve into GSS-API, and I'm wondering whether it is possible at all to send/receive KRB_SAFE and/or KRB_PRIV messages using this API. Or does one have to rever to the lower level API's to send/receive these messages ?
For KRB_SAFE and KRB_PRIV messages specifically, you would need to be using the Kerberos library API. The GSS-API has functions for constructing similar messages though, in the sense of sending data with integrity protection and optional privacy protection; the details are a little different. If you want a more general application (e.g., you might change the security mechanism someday, or give it to another site that may want to use another security mechanism), and don't need to manipulate the lower-level details of the Kerberos data, GSS-API may be the better approach.
Ken
________________________________________________ Kerberos mailing list [EMAIL PROTECTED] https://mailman.mit.edu/mailman/listinfo/kerberos
