package krb
Install
Dune Dependency
Authors
Maintainers
Sources
sha256=353675621e4c5a888f2483dc1bb7281bd17ce4ed7dfd2f40142257f98db7c77d
doc/krb.public/Krb_public/Mode/index.html
Module Krb_public.Mode
Source
type 'a mode =
| Kerberized of 'a
(*The connection will be kerberized.
*)| Test_with_principal of Principal.Name.t
(*In test mode, clients/servers can pretend to be any principal. Please note that this mode provides NO Kerberos protection. The connection will be plain TCP.
*)
A Mode.t
specifies whether a client or server should use Kerberos for authentication or use a test mode where clients/servers can pretend to be any principal. All production clients and servers should use Kerberized
mode.
When you use the default kerberized mode on both client and server, you will end up with encrypted connections. Secure by default! Note that full encryption has a performance cost.
Note that clients can only talk to servers that are running with the same mode constructor: a client using Kerberized
can only talk to a server using Kerberized
. Same goes for Test_with_principal
The *_with_auth_conn_type
modes are used for RPC transports that don't support transforming data, and thus only support the Auth
connection type.