Re: testing pkinit with gssmaestro/gssmask

[Love Hörnquist Åstrand <lha@kth.se>]

4 dec 2006 kl. 23.36 skrev Olga Kornievskaia:

> Hi,
>
>    I have a couple of questions: have you ever tested pkinit code  
> with gssmonger/gssmaestro/gssmask? The reason i ask is that I don't  
> see any way to actually pass in pkinit options to the code. kinit  
> would usually call
> krb5_get_init_creds_opt_set_pkinit() before calling  
> krb5_get_init_creds_password(). gssmask.c calls gss_import_name()  
> followed by gss_init_sec_context() which will eventually call  
> krb5_get_init_creds_password() but set_pkinit will not be called.

I had no gssmonger that I knew supported pkinit (maybe I did), so I  
never implemented the code
in the client. If you know how to test it, I'll complete the code.

Love