[22959] in Kerberos

home help back first fref pref prev next nref lref last post

Re: Generic unknown RC/IO error while verifying initial ticket

daemon@ATHENA.MIT.EDU (Sam Hartman)
Wed Dec 1 09:07:20 2004

To: "Douglas E. Engert" <deengert@anl.gov>
From: Sam Hartman <hartmans@mit.edu>
Date: Wed, 01 Dec 2004 09:05:05 -0500
In-Reply-To: <41ADCA4F.3000407@anl.gov> (Douglas E. Engert's message of
 "Wed, 01 Dec 2004 07:42:39 -0600")
Message-ID: <878y8iglm6.fsf@luminous.mit.edu>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
cc: Jeremy Allison <jeremy.allison@hp.com>
cc: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu

>>>>> "Douglas" == Douglas E Engert <deengert@anl.gov> writes:

    Douglas> Sam Hartman wrote:
    >>>>>>> "Jeremy" == Jeremy Allison <jeremy.allison@hp.com> writes:
    Jeremy> Ok, I'm going to let off some steam here... :-) <rant mode
    Jeremy> on> This is what drives me *nuts* about krb5 debugging for
    Jeremy> customers.  WHY DOESN'T THE ERROR MESSAGE GIVE SOME
    Jeremy> DETAILS ABOUT WHAT IT IS TRYING TO DO ! For example, the
    Jeremy> filename it was trying to open and what the error code was
    Jeremy> ?  </rant mode off>
    >> Would you be interested in helping design a way to do this?
    >> Heimdal allows an error string to be stored inside a context
    >> and retrieved later.  That gives you enough flexibility to
    >> store the file name etc.  The complexity is that we would need
    >> to go through the code and find every place where we have an
    >> error return and at least clear that string so the error
    >> returned always corresponded to the string if it was set.

    Douglas> Tag the string with the error code too, so only clear it
    Douglas> if the error code to be reported to the user does not
    Douglas> match the error with the message.

Yeah, that works. It means the user has to pass in both a context and
an error code to get the (possibly enhanced) error string.

I think having to pass in an eventually unnecessary error code is an
acceptable price to pay for reasonable error reporting from krb5.


--Sam
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post