[15670] in Kerberos_V5_Development
Re: issue with krb5_prompter_posix() design
daemon@ATHENA.MIT.EDU (Will Fiveash)
Thu Apr 15 16:56:15 2010
Date: Thu, 15 Apr 2010 15:56:30 -0500
From: Will Fiveash <will.fiveash@oracle.com>
To: Greg Hudson <ghudson@mit.edu>
Message-ID: <20100415205630.GB22981@sun.com>
Mail-Followup-To: Greg Hudson <ghudson@mit.edu>,
MIT Kerberos Dev List <krbdev@mit.edu>
MIME-Version: 1.0
Content-Disposition: inline
In-Reply-To: <1271363267.23242.526.camel@ray>
Cc: MIT Kerberos Dev List <krbdev@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
On Thu, Apr 15, 2010 at 04:27:47PM -0400, Greg Hudson wrote:
> On Thu, 2010-04-15 at 16:23 -0400, Will Fiveash wrote:
> > Seems to me the PAM approach is better since it's acquiring the reply.
> > Anyway this is adding complication to the prompter bridge function I
> > wrote in pam_krb5 to allow preauth plug-ins like pkinit to prompt via a
> > PAM conversation function.
>
> I agree that the PAM approach is better, but since this is a public
> interface, I don't see any way of getting from here to there without
> more pain than the benefit justifies.
>
> (Barring some kind of generalized krb5 API revamp, anyway--not a venture
> I'm prepared to charge ahead on while there are so many internals to
> clean up.)
Yeah, I noticed krb5_prompter_posix() was a public interface and had a
feeling I'd get the above reponse. Not a big problem now that I'm aware
of this issue but I thought I'd mention it anyway as it may be a source
of memory leaks for others.
--
Will Fiveash
Oracle
Note my new work e-mail address: will.fiveash@oracle.com
http://opensolaris.org/os/project/kerberos/
Sent using mutt, a sweet text based e-mail app: http://www.mutt.org/
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
