Thanks for the correction! The hint is helpful, to :-)
- Ying

-----Original Message-----
From: Jeffrey Altman [mailto:[EMAIL PROTECTED] 
Sent: Friday, September 10, 2004 3:02 PM
To: Ying Zhao
Cc: Derrick Schommer; [EMAIL PROTECTED]
Subject: Re: interoperability of Kerberos client and server

The appropriate place for this discussion is [EMAIL PROTECTED] or the 
comp.protocols.kerberos
newsgroup.  The [EMAIL PROTECTED] mailing list is meant to be used for 
discussion on the
development of the MIT Kerberos implementation.

I am redirecting replies to [EMAIL PROTECTED]

As a hint: Java JAAS modules do not perform network authentication.  
They are used to obtain
local credentials which may or may not be used in the future input to 
the network authentication
protocol such as GSS-API.  Java provides its own implementation of 
GSS-API Kerberos 5 for use
in communicating with other GSS-API Kerberos 5 compatible clients and 
servers.

Jeffrey Altman


Ying Zhao wrote:

>Thanks, Derrick!
>
>However, as far as my understanding about GSS-API, it is more like a
>peer-to-peer implementation. If I want to stick to (or at most
customize
>with) 
>"com.sun.security.auth.module.Krb5LoginModule" - a JAAS plug-in module,
>is this going to be a potential problem? From the source code, it is a
>NT implementation and I am working on tuning it for UNIX one.
>
>Thanks,
>- Ying
>
>  
>

________________________________________________
Kerberos mailing list           [EMAIL PROTECTED]
https://mailman.mit.edu/mailman/listinfo/kerberos

Reply via email to