[19649] in Kerberos
RE: MIT Kerberos: is it Thread-Safe?
daemon@ATHENA.MIT.EDU (Tim Alsop)
Wed Jul 23 03:24:48 2003
Message-ID: <815D636CDFAAD611A2DA006097AC6157C60BAC@blackanwhitecat.cybersafe.ltd.uk>
From: Tim Alsop <Tim.Alsop@CyberSafe.Ltd.UK>
To: Booker Bense <bbense@SLAC.Stanford.EDU>, Kent_Wu@trendmicro.com
Date: Wed, 23 Jul 2003 08:16:48 +0100
MIME-Version: 1.0
Content-Type: text/plain
cc: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu
FYI.
The CyberSafe GSSAPI library is fully threadsafe by design and was not based on any MIT code - it was developed to the RFC specification and designed to be a fully stable and commercially supported library for application security.
Thanks, Tim.
-----Original Message-----
From: Booker Bense [mailto:bbense@SLAC.Stanford.EDU]
Sent: 22 July 2003 23:30
To: Kent_Wu@trendmicro.com
Cc: kerberos@mit.edu
Subject: RE: MIT Kerberos: is it Thread-Safe?
On Tue, 22 Jul 2003 Kent_Wu@trendmicro.com wrote:
> Are you sure Heimdal is thread-safe? Like a month ago I checked with
> them and theirs is not thread-safe either.
- Rumor has it that while heimdal is not guaranteed to be thread-safe, in practice it works well enough. (i.e. there are a lot of people running large OpenLDAP installations using hiemdal gssapi in a threaded server and they don't have problems. )
>
> Kent
>
> -----Original Message-----
> From: Nikola Milutinovic [mailto:Nikola.Milutinovic@ev.co.yu]
> Sent: Monday, July 21, 2003 10:14 PM
> To: kerberos@mit.edu
> Subject: MIT Kerberos: is it Thread-Safe?
>
>
> Hi all.
>
> As the subject says, is MIT Kerberos thread-safe and if it is, which version?
>
- There is no currently distributed version that is thread-safe.
Some people at IBM have done the work to make a thread-safe version of the API, but I don't know if this work is yet available.
> OpenLDAP FAQ warns that MIT Kerberos libraries are not thread safe and
> that one should either use "--no-threads" when building it or build
> with Heimdal implementation. Now, I have gotten quite used to MIT
> Kerberos, have built several packages linked with it. It would be a
> drag to switch to Heimdal now.
- From a programmer's point of view there is not a large difference in the libraries. In general, porting from one to the other is mostly a matter of getting the correct libraries in the compile line.
- Booker C. Bense
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
