On Fri, Feb 24, 2023 at 02:50:35PM -0600, Nico Williams wrote: > On Fri, Feb 24, 2023 at 12:19:53PM -0800, Russ Allbery wrote: > > Nico Williams <[email protected]> writes: > > > If you're just trying to set up a GSS context between a client and a > > > server, then GSS is really simple, and much simpler than the krb5 API. > > > > I'm very dubious about this statement. The requirement to handle > > negotiation and potential multiple round trips and all the complexity with > > major and minor status codes makes the equivalent GSS code complicated and > > annoying. > [...] > > RFC 7546 exists.
And https://github.com/kaduk/gssdoc/blob/master/gss-sample.c has the un-processed version of the sample code from the RFC; I did compile and run it during development of the RFC. -Ben ________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos
