[4805] in Kerberos
Re: More Kerberos Complaints
daemon@ATHENA.MIT.EDU (Doug Engert)
Wed Mar 15 13:15:15 1995
Date: Wed, 15 Mar 95 11:38:08 CST
From: "Doug Engert" <DEEngert@anl.gov>
To: <KERBEROS@MIT.EDU>
The sunos tmpfs bug is annoying. It's especially annoying because
/tmp is hardcoded in lots of places and it is a pain to change. Even
worse, K5 has a complicated multi-layered collection of subroutines
for reading ticket caches of various kinds in various ways. It's all
very tricky and complicated and over engineered. It's for sure that
K5 is much larger than K4, without having enough additional useful
I must strongly disagree with the last statement. The ability to forward
credentials, and the cross realm authentication are two of the MAJOR
features which make K5 so attractive.
As a simple circumvention to the /tmp problem, try this:
src/lib/krb5/ccache/file/fcc_maybe.c
------- fcc_maybe.c -------
107a108,111
> /* ANL - On SunOS and a file in /tmp in swap, fcntl returns EINVAL
> * As a simple bypass, return 0 and skip the lock
> */
> if (errno == EINVAL) return(0);
This will let you test the code until someone comes up with a better
fix, or Sun fixes this problem.
Douglas E. Engert
Systems Programming
Argonne National Laboratory
9700 South Cass Avenue
Argonne, Illinois 60439
(708) 252-5444
Internet: DEEngert@anl.gov
