[39170] in Kerberos
Re: appl/simple/client/sim_client.c uses internal APIs
daemon@ATHENA.MIT.EDU (Simo Sorce)
Thu Feb 23 11:13:21 2023
Message-ID: <465b96c64cc9040b0498d511c7574080ff92c8a1.camel@redhat.com>
From: Simo Sorce <simo@redhat.com>
To: Florian Weimer <fweimer@redhat.com>, kerberos@mit.edu
Date: Thu, 23 Feb 2023 11:07:27 -0500
In-Reply-To: <87ilfs4u13.fsf@oldenburg.str.redhat.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On Thu, 2023-02-23 at 10:20 +0100, Florian Weimer wrote:
> The example program uses internal APIs not present in the public header
> file (krb5_gen_portaddr, krb5_gen_replay_name; the THIS IS UGLY part).
> Are there alternatives part of the public API?
>
> The issue here is that the example code has leaked outside of krb5 to
> other projects, and it only builds there because current compilers still
> support implicit function declarations. I would like to give guidance
> to the external users, but unfortunately I don't know anything about
> Kerberos.
Wherever possible you should recommend people use GSSAPI and not krb5
APIs directly, unless they are building tools specifically to manage
aspects of krb5 (acquiring tickets, managing ccaches, etc.)
Simo.
--
Simo Sorce
RHEL Crypto Team
Red Hat, Inc
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
