Works for krb5 and SPNEGO mechanisms. Kerberos credentials are passed as credential cache names, or if there are memory based credentials, inband in the protocol. This means that the credentials buffers must be keep secret. As documented by IBM (they have the wrong prototype though) and GGF (GSS-API Extensions) back in 2001
		
			
				
	
	
	
		
			21 KiB
		
	
	
	
	
	
	
	
			
		
		
	
	
			21 KiB