[Search for users] [Overall Top Noters] [List of all Conferences] [Download this site]

Conference tuxedo::dce-products

Title:	DCE Product Information
Notice:	Kit Info - See 2.-4.
Moderator:	TUXEDO::MAZZAFERRO

Created:	Fri Jun 26 1992
Last Modified:	Fri Jun 06 1997
Last Successful Update:	Fri Jun 06 1997
Number of topics:	2269
Total number of notes:	10003

2201.0. "GSSAPI seperate contexts per thread ?" by CSC32::C_JACOBSON () Wed Mar 26 1997 12:22

    Hello,
    
         A customer has created a multi-threaded DCE application using GSSAPI.
    
         Within each thread of the application, it performs a DCE login for 
         different principals. What she found out was that "a DCE login context 
         has affect on the whole process meaning that if thread_1 performs DCE 
         login for principal A. When thread_2 performs DCE login for 
         principal B, thread_2 also changes thread_1's login context from
         principal A to principal B.
    
    	 The customer would like to know if it is possible to
         have each thread have a different login context ?
    
    Thanks in advance,
    Chris Jacobson

T.R Title User Personal
Name Date Lines

2201.1 TUXEDO::WRAY John Wray, Distributed Processing Engineering Wed Mar 26 1997 13:02 25

T.R	Title	User	Personal Name	Date	Lines
2201.1		TUXEDO::WRAY	John Wray, Distributed Processing Engineering	`Wed Mar 26 1997 13:02`	25
	> A customer has created a multi-threaded DCE application using GSSAPI. > > Within each thread of the application, it performs a DCE login for > different principals. What she found out was that "a DCE login context > has affect on the whole process meaning that if thread_1 performs DCE > login for principal A. When thread_2 performs DCE login for > principal B, thread_2 also changes thread_1's login context from > principal A to principal B. > > The customer would like to know if it is possible to > have each thread have a different login context ? This isn't specific to GSSAPI - it's part of standard DCE security behavior. It's possible for a program to maintain multiple login contexts, but there can be only one "default context", which applies to the entire process. It sounds as though the customer could write the program to use explicit context-handles rather than trying to use the default handle. The program will have to use the sec_login API; dce_login can only set the default login context. John

>         A customer has created a multi-threaded DCE application using GSSAPI.
>    
>         Within each thread of the application, it performs a DCE login for 
>         different principals. What she found out was that "a DCE login context 
>         has affect on the whole process meaning that if thread_1 performs DCE 
>         login for principal A. When thread_2 performs DCE login for 
>         principal B, thread_2 also changes thread_1's login context from
>         principal A to principal B.
>    
>    	 The customer would like to know if it is possible to
>         have each thread have a different login context ?
    
    This isn't specific to GSSAPI - it's part of standard DCE security
    behavior.
    
    It's possible for a program to maintain multiple login contexts, but
    there can be only one "default context", which applies to the entire
    process.  
    
    It sounds as though the customer could write the program to use
    explicit context-handles rather than trying to use the default handle. 
    The program will have to use the sec_login API; dce_login can only set
    the default login context.
    
    John