Question on PAC and principal APIs project

[Nicolas Williams]

On Tue, Feb 10, 2009 at 08:13:48PM -0500, Sam Hartman wrote:
> >>>>> "Natalie" == Natalie Li <Natalie.Li at Sun.COM> writes:
> 
>     Natalie> Thanks Ken!
>     Natalie> Ken Raeburn wrote:
> 
> Note that there is also a mechanism to extract authorization data from
> a GSS-API context.

Indeed.  We'll have to work that in, probably by extracting the PAC and
associating it with the gss_name_t and then adding more functions along
the lines of gsscred_name_to_unix_cred() (at least as an project private
interface in Solaris for Natalie's purposes).