Re: [Perlgssapi-users] gss_nt_service_name

[Achim G. <ac...@gr...>]

On Monday 25 September 2006 14:11, Massimiliano Masi wrote:
> Hi,
>
> On Monday 25 September 2006, alle 13:50, Achim Grolms wrote:
> > > So, I've to create a context on every soap message...
> >
> > or you *use* the context and use gss_wrap/gss_unwrap
> > for integrity protection and/or encryption of messages paylod.
>
> This looks good. Once I've created the context, I can use
> the gss_wrap for cypher all the text.
>
> But is a webservice. All the connections are stateless.

Yes.
I think your RPC is more of "hit and run" style, with no state needed.
Integrity protection is done by HTTPS.

That means: Create one new context per SOAP-Mesage, used for authentication 
only.

Correct?

Achim