Little bit late (I have a quite large backlog), but if still relevant...

>We are observing issue when running curl under negotiate with multiple 
>principals both having same realm(say user1/krbnet....@example.com and 
>user2/krbnet....@example.com).
>We are using directory cache to update the cache with both the principals.
>kinit -kt user1/krbnet....@example.com
>kinit -kt user2/krbnet....@example.com
>curl library is loading only the primary credentials (here user2) in the 
>Kerberos cache and working even though there are user1 and user2 credentials 
>in the Kerberos cache.
>Is there any option in curl to specify the negotiate connection based on the 
>principal?

>Can anybody suggest a way to work with curl if multiple Kerberos principals 
>are present and both pointing to same realm.

You can use a different cache for each user and use the environment variable 
KRB5CCNAME to point to the correct cache before running curl.

HTH

Yehezkel Horowitz

-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette:  http://curl.haxx.se/mail/etiquette.html

Reply via email to