Re: SEAM krb API

2004-04-21 Thread Douglas E. Engert
Nico, One of my long term goals is to use a vendor's provided Kerberos, if at all possible. It looks like you are addressing most of the issues with storing of the delegated credential being one of the big problems along with a simple authz xxx_userok that can be used by daemons like sshd.

Re: SEAM krb API

2004-04-20 Thread Wyllys Ingersoll
melissa_benkyo wrote: hello all, does seam support kerberos API calls? I need to implement a kerberos I'm pretty sure this has already been answered several times, but the answer is no. The Kerberos API is not exposed to programmers when using SEAM. client app that needs to get initial

Re: SEAM krb API

2004-04-20 Thread Wyllys Ingersoll
Ken Hornstein wrote: does seam support kerberos API calls? I need to implement a kerberos client app that needs to get initial credentials and So far based on my investigation, SEAM doesn't seem to have kerberos api calls. I found krb_get_cred but I believe these are kerberos 4 API calls and

Re: SEAM krb API

2004-04-20 Thread Henry B. Hotz
:34:03 -0400 From: Wyllys Ingersoll [EMAIL PROTECTED] To: melissa_benkyo [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: Re: SEAM krb API Message-ID: [EMAIL PROTECTED] In-Reply-To: [EMAIL PROTECTED] References: [EMAIL PROTECTED] Content-Type: text/plain; charset=ISO-8859-1; format=flowed MIME

Re: SEAM krb API

2004-04-20 Thread Jeffrey Altman
Wyllys Ingersoll wrote: krb5_kuserok is sort of an abberation. Its a weak attempt at an authorization interface. Its very easy to write your own non-KRB5-API dependent version of krb5_kuserok using just GSSAPI calls and standard C library functions. Obviously, you must assume some

Re: SEAM krb API

2004-04-20 Thread Will Fiveash
On Tue, Apr 20, 2004 at 01:36:41PM -0500, Will Fiveash wrote: On Tue, Apr 20, 2004 at 01:58:31PM -0400, Wyllys Ingersoll wrote: Ken Hornstein wrote: For example, I was trying to help someone once who was trying to get Simon Wilkinson's GSSAPI patch for SSH going with Solaris SEAM, and

Re: SEAM krb API

2004-04-20 Thread Nicolas Williams
On Tue, Apr 20, 2004 at 02:28:20PM -0500, Will Fiveash wrote: On Tue, Apr 20, 2004 at 01:36:41PM -0500, Will Fiveash wrote: On Tue, Apr 20, 2004 at 01:58:31PM -0400, Wyllys Ingersoll wrote: Ken Hornstein wrote: For example, I was trying to help someone once who was trying to get

SEAM krb API

2004-04-19 Thread melissa_benkyo
hello all, does seam support kerberos API calls? I need to implement a kerberos client app that needs to get initial credentials and So far based on my investigation, SEAM doesn't seem to have kerberos api calls. I found krb_get_cred but I believe these are kerberos 4 API calls and besides I

Re: SEAM krb API

2004-04-19 Thread Ken Hornstein
does seam support kerberos API calls? I need to implement a kerberos client app that needs to get initial credentials and So far based on my investigation, SEAM doesn't seem to have kerberos api calls. I found krb_get_cred but I believe these are kerberos 4 API calls and besides I dont' have a

Re: SEAM krb API

2004-04-19 Thread Will Fiveash
On Mon, Apr 19, 2004 at 09:36:10AM -0700, melissa_benkyo wrote: hello all, does seam support kerberos API calls? I need to implement a kerberos client app that needs to get initial credentials and So far based on my investigation, SEAM doesn't seem to have kerberos api calls. I found