Re: Easiest way to get service ticket after obtaining tgt

[Love Hörnquist Åstrand <lha@kth.se>]

Jeremiah Martell <inlovewithgod@gmail.com> writes:

> Hello,
>
>    I currently use krb5_make_principal() and krb5_get_init_creds_password() to
> obtain a tgt, and then krb5_cc_default(), krb5_cc_initialize, and
> krb5_cc_store_cred() to store the tgt in the cache. So far this is easy. :-)
>
>    Now, if I wanted to obtain a service ticket for ldap, in domain
> someDomain.com (which is in SOMEDOMAIN.COM realm), what's the easiest way
> to do this with the heimdal api function calls? I've looked at
> krb5_get_credentials, but I'm unsure what to put in the *increds or
> **outcreds variables.

The manual page for krb5_get_credentials didn't really say, so I updatated
it to this:

     krb5_get_credentials_with_flags() get credentials specified by
     in_creds->server and in_creds->client (the rest of the in_creds structure
     is ignored) by first looking in the ccache and if doesn't exists or is
     expired, fetch the credential from the KDC using the krbtgt in ccache.
     The credential is returned in out_creds and should be freed using the
     function krb5_free_creds().

is that enough ?

Love

PGP signature