[4034] in Kerberos

home help back first fref pref prev next nref lref last post

Kerberos and IPng (was Re: I need comment on Kerberos vs. NetSP (IBM))

daemon@ATHENA.MIT.EDU (Shawn Mamros)
Thu Oct 13 09:38:41 1994

To: kerberos@MIT.EDU
Date: Thu, 13 Oct 1994 08:59:50
From: mamros@ftp.com (Shawn Mamros)
Reply-To: mamros@ftp.com

mcguire@rocinante.digex.net (Dave McGuire) writes:
>  Now THAT is an interesting thought.  How will Kerberos (4 *or* 5)
>deal with IPng?  Is it too early to speculate?  Any thoughts?

For V5: No problem.  Just define a new address type (say, ADDRTYPE_IPNG),
and modify the relevant code (there should only be a few pieces in the
lib/krb5/os directory that would be relevant; everything else that deals
with addresses deals with them in general terms).  If there's already an
"official" <sys/socket.h> value for AF_IPNG (or whatever it gets called),
then that would almost certainly be the right value to use, though the
real authority for that decision rests with whomever the keeper of the
V5 protocol constants is (Cliff Neuman, right?).

For V4: Probably impossible.  The V4 protocol uses fixed-size four-byte
fields to store host addresses; IPng addresses are 16 bytes.  It certainly
can't be done without breaking all existing V4 implementations.  Given
the existence of V5, it isn't worth the hassle of trying to make a major
change to V4 at this point, IMO.

-Shawn Mamros
E-mail to: mamros@ftp.com


home help back first fref pref prev next nref lref last post