[36011] in Kerberos
Re: Proposition for new remctl ACL scheme / group support
daemon@ATHENA.MIT.EDU (Jeffrey Altman)
Sat Apr 5 19:44:03 2014
X-Envelope-From: jaltman@secure-endpoints.com
X-MDaemon-Deliver-To: kerberos@mit.edu
Message-ID: <53409526.2000802@secure-endpoints.com>
Date: Sat, 05 Apr 2014 19:43:34 -0400
From: Jeffrey Altman <jaltman@secure-endpoints.com>
MIME-Version: 1.0
To: Russ Allbery <eagle@eyrie.org>, Remi FERRAND <remi.ferrand@cc.in2p3.fr>
In-Reply-To: <87ioqn1sfm.fsf@windlord.stanford.edu>
Cc: kerberos@mit.edu
Content-Type: multipart/mixed; boundary="===============0110800236=="
Errors-To: kerberos-bounces@mit.edu
This is a cryptographically signed message in MIME format.
--===============0110800236==
Content-Type: multipart/signed; protocol="application/pkcs7-signature";
micalg=sha1; boundary="------------ms020303000700050302030903"
This is a cryptographically signed message in MIME format.
--------------ms020303000700050302030903
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
On 4/5/2014 3:34 PM, Russ Allbery wrote:
>
> The only other thing that I'm not sure about is how annoying it is to s=
et
> up and tear down the libraries that let you do PTS queries. I'm pretty=
> aggressive about making sure that the remctl server is entirely clean
> about memory allocation and free and not leaking file descriptors to ch=
ild
> processes, and the OpenAFS libraries often have some difficulties there=
=2E
If you want to be able to load and unload the libraries then you cannot
link to anything that includes OpenAFS rx. rx will start background
threads and those threads cannot safely be stopped using the OpenAFS
implementation.
Jeffrey Altman
--------------ms020303000700050302030903--
--===============0110800236==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
--===============0110800236==--
