New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Support server side delegation #32

Open

behackett opened this issue Feb 14, 2019 · 0 comments

Labels

enhancement help wanted

Member

behackett commented Feb 14, 2019 •

edited

Loading

It should be possible to support server side delegation using the ImpersonateSecurityContext and RevertSecurityContext functions in SSPI.

https://docs.microsoft.com/en-us/windows/desktop/api/sspi/nf-sspi-impersonatesecuritycontext
https://docs.microsoft.com/en-us/windows/desktop/api/sspi/nf-sspi-revertsecuritycontext
https://docs.microsoft.com/en-us/windows/desktop/SecAuthN/context-requirements

The API work to match ccs-pykerberos:

Add support for the "delegated" param to authGSSClientInit
Add support for authGSSServerHasDelegated

I don't think the other related functions (authGSSServerStoreDelegate and authGSSServerCacheName) make sense in SSPI or are possible to replicate.

behackett added the enhancement label

behackett added the help wanted label

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment