Hi,

We've configured Kerberos to authenticate AIX 5.3 users with Active Directory and I now have to port an application written in C to the new security model.

Currently, our users can login as normal and running a "klist" command reveals that they have been successfully granted a ticket.

The application I have to port currently uses the local password file to authenticate users but of course now I'd like to be able to authenticate them via Kerberos. I take it there's no API to call kinit() and I can't script it because it requires a password on the command line which prevents the idea of having a file storing the password (for obvious reasons).

Can anyone point me in the right direction?

Thanks

Here is a start ...

Kerberos authentication for AIX Version 5.3 Network File System Version 4

Thanks for your reply

As a result of your link I found this:

"To learn more on the Kerberos APIs, refer to the IBM Network Authentication Service Version 1.4 Application Development Reference guide shipped on the AIX 5L Version 5.3 Expansion Pack CD and the sample Kerberos example programs bundled with the IBM NAS product."

My system admin installed what I needed and there was indeed a samples directory which contained exactly what I needed

There's a source code example called krb_login.c which shows how to authenticate with the principal and password and there's even a keytab version along with other examples:

• Login using principal and password
• Login from keytab
• List credentials
• Destroy credentials
• Create principal
• Delete principal

There's even a complete client/server implementation too!