Using default credentials is the simplest option always

ubccr / kerby

Go wrapper for Kerberos GSSAPI

Apache License 2.0

35 stars 17 forks source link

Using default credentials is the simplest option always #14

Open nicowilliams opened 4 years ago

nicowilliams commented 4 years ago

The README discusses using client keytabs. This is not important, and it's mostly useless.

Just use GSS_C_NO_CREDENTIAL as the credential handle on the initiator and acceptor sides.

nicowilliams commented 4 years ago

There is also no need to refer to any KRB5* env vars, except as a helping hand for users who are unfamiliar with MIT Kerberos or Heimdal. Certainly there is no need to refer to these in code.

nicowilliams commented 4 years ago

If you must have programmatic support for the specification of alternative, non-default credentials and credentials stores, then I recommend that you use gss_acquire_cred_from(), which lets you specify a set of key/value pairs including ones for specifying ccache and keytab names.