[15589] in Kerberos_V5_Development

home help back first fref pref prev next nref lref last post

Re: config file verification tool

daemon@ATHENA.MIT.EDU (Mark Phalan)
Fri Mar 12 11:05:38 2010

MIME-version: 1.0
Date: Fri, 12 Mar 2010 17:04:53 +0100
From: Mark Phalan <Mark.Phalan@sun.com>
In-reply-to: <702ED787-B156-4868-88A8-829C4348B430@mit.edu>
To: Zhanna Tsitkova <tsitkova@mit.edu>
Message-id: <4B9A6625.6050809@Sun.COM>
Cc: krbdev@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu

On 03/12/10 04:50 PM, Zhanna Tsitkova wrote:
> I am afraid it would add both the undesirable complexity to the code and
> the additional overhead during the run-time.
> The main purpose of this validator tool is to avoid both of these
> complications.

I haven't actually taken a close look at your tool yet but I was hoping 
that some of your work could be leveraged to make libkrb5 print better 
error messages. It seems to me that it should be possible to provide 
better validation within libkrb5 without adding unbearable overhead or 
complexity.

Having an external tool which can validate krb5.conf is definitely 
better than not having any tool at all.

Thanks,

-M
_______________________________________________
krbdev mailing list             krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev

home help back first fref pref prev next nref lref last post