package krb

  1. Overview
  2. Docs
A library for using Kerberos for both Rpc and Tcp communication

Install

Dune Dependency

Authors

Maintainers

Sources

krb-v0.16.0.tar.gz
sha256=353675621e4c5a888f2483dc1bb7281bd17ce4ed7dfd2f40142257f98db7c77d

doc/krb.public/Krb_public/Mode/index.html

Module Krb_public.ModeSource

Sourcetype 'a mode =
  1. | Kerberized of 'a
    (*

    The connection will be kerberized.

    *)
  2. | Test_with_principal of Principal.Name.t
    (*

    In test mode, clients/servers can pretend to be any principal. Please note that this mode provides NO Kerberos protection. The connection will be plain TCP.

    *)

A Mode.t specifies whether a client or server should use Kerberos for authentication or use a test mode where clients/servers can pretend to be any principal. All production clients and servers should use Kerberized mode.

When you use the default kerberized mode on both client and server, you will end up with encrypted connections. Secure by default! Note that full encryption has a performance cost.

Note that clients can only talk to servers that are running with the same mode constructor: a client using Kerberized can only talk to a server using Kerberized. Same goes for Test_with_principal

Sourceval compare_mode : ('a -> 'a -> int) -> 'a mode -> 'a mode -> int
Sourceval hash_fold_mode : (Ppx_hash_lib.Std.Hash.state -> 'a -> Ppx_hash_lib.Std.Hash.state) -> Ppx_hash_lib.Std.Hash.state -> 'a mode -> Ppx_hash_lib.Std.Hash.state
Sourceval sexp_of_mode : ('a -> Sexplib0.Sexp.t) -> 'a mode -> Sexplib0.Sexp.t
Sourcemodule Client : sig ... end
Sourcemodule Server : sig ... end

The *_with_auth_conn_type modes are used for RPC transports that don't support transforming data, and thus only support the Auth connection type.

Sourcemodule Stable : sig ... end
OCaml

Innovation. Community. Security.