On Sat, Oct 25, 2025 at 2:16 AM Jake Scott <[email protected]> wrote:
> I would guess that the vast majority of applications making use of > GSSAPI probably use a small subset of the functionality Perhaps, but any heterogeneous site where Microsoft Active Directory is used and is authoritative is going to leverage GSSAPI heavily. > and probably a very large percentage of users still use a file based > credential cache. So a cut-down less complete provider might be of > benefit for those folks esp. those who just won't use C bindings to > anything. Honestly I think I would focus on a decent SASL > implemementation before thinking about any of that though. While the FILE: ccache type is the oldest and simplest, both the KEYRING:persistent and (especially) the KCM: ccache types offer significant advantages. So I wouldn’t necessarily assume that you’re not going to commonly encounter other ccache types than FILE:. (For example, KCM: has been the default ccache type in Fedora since at least Fedora 41.) ________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos
