[2185] in Kerberos-V5-bugs

home help back first fref pref prev next nref lref last post

Re: Implementation of appdefaults profile

daemon@ATHENA.MIT.EDU (Ken Hornstein)
Sat Aug 24 13:16:05 1996

To: epeisach@MIT.EDU
Cc: krb5-bugs@MIT.EDU
In-Reply-To: Your message of "Sat, 24 Aug 1996 09:37:49 EDT."
             <9608241337.AA25077@kangaroo.mit.edu> 
Date: Sat, 24 Aug 1996 13:16:00 -0400
From: Ken Hornstein <kenh@cmf.nrl.navy.mil>

>The one complaint I have with your patch is that it modifies the profile
>library and requires that applications know about the profile field of
>the context 0 which they don't normally do - if they only include
>krb5.h. 
>
>Perhaps a better solution would be to call the functions
>krb5_appdefault_string, etc and take a krb5_context as an argument.

That makes sense; I did say that I wasn't sure this belongs in the
profile or not.  Certainly it would be easy to change this to be
a krb5_* function.  Another thing that would possibly make sense would
be to change the realm argument to be a krb5_data type, since that's the
way you normally deal with realms.

>Also - I would prefer if the #define of KRB5_DEFAULT_LIFE was still used
>- although changed to "10h 0m 0s"

Yeah, I realized later that keeping KRB5_DEFAULT_LIFE was probably a good
idea.

So, any chance this will make it in for beta 7? :-)

--Ken

home help back first fref pref prev next nref lref last post