On 4/5/2023 9:11 AM, Greg Hudson wrote:
On 4/5/23 00:52, Dan Mahoney (Gushi) wrote:
Can neither mit kinit nor the heimdal one supplied with BSD systems
by default, not just be forced to a single KDC?
It can't, and the library APIs don't really enable it.
If krb5_init_context_profile() actually did what it said, rather than
creating a new profile based on the embedded profile path, it would be
easy (profile_init_path(), change the KDC settings in the profile, pass
it to krb5_init_context_profile()). As is you have to manipulate
internal-only krb5 context struct data to override anything.
There was a thread a while ago discussing fixing this API mistake - did
it ever go anywhere?
--
Carson
________________________________________________
Kerberos mailing list [email protected]
https://mailman.mit.edu/mailman/listinfo/kerberos
