Re: [xad] Re: MS kerb drafts

[Luke Howard <lukeh@PADL.COM>]

>does the kdc have sufficient information to perform
>the signing?

Don't know yet.

>or is it a better idea to create and use an SSPI crypto
>api (see ntsecapi project on dcerpc.net) to perform the
>signing?

Well, GSS-API is analogous to SSPI, then the KDC could
presumably avail itself of libgssapi to do the signing.

I am presuming that your SSPI implementation will use
Heimdal's GSS-API for Kerberos support :-)

-- Luke

P.S. Assar -- you don't know of an open source SPNEGO
implementation, do you?

--
Luke Howard | lukehoward.com
PADL Software | www.padl.com