[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Proposal to export gssapi context



>>>>> "Nicolas" == Nicolas Williams <Nicolas.Williams@sun.com> writes:

    Nicolas> With an eye to the GGF extensions, what should happen is that this sort
    Nicolas> of extension should output a new credential handle.  If the input
    Nicolas> credential handle is the GSS_C_NO_CREDENTIAL then the output should be a
    Nicolas> cred that corresponds to GSS_Acquire_cred() of the GSS_C_NO_NAME, plus
    Nicolas> the options set by the extension (in this case the enctypes
    Nicolas> restrictions).

Why?  Aren't credentials mutable by gss_add_credential etc?