[15828] in Kerberos_V5_Development
Re: Sanity check: GSSAPI SPI simplifications
daemon@ATHENA.MIT.EDU (=?iso-8859-1?Q?Love_H=F6rnquist_=C)
Mon May 24 21:13:52 2010
X-KTH-mail-from: lha@kth.se
Mime-Version: 1.0 (Apple Message framework v1148)
From: =?iso-8859-1?Q?Love_H=F6rnquist_=C5strand?= <lha@kth.se>
In-Reply-To: <CD1CF89724AA83857D6EBABF@minbar.fac.cs.cmu.edu>
Date: Mon, 24 May 2010 18:13:35 -0700
Message-Id: <13D0E62C-E6AC-4F12-8354-AB0A44EA518D@kth.se>
To: Jeffrey Hutzelman <jhutz@cmu.edu>
Cc: "krbdev@mit.edu" <krbdev@mit.edu>,
Nicolas Williams <nicolas.williams@oracle.com>
Content-Type: multipart/mixed; boundary="===============1491106252=="
Errors-To: krbdev-bounces@mit.edu
--===============1491106252==
Content-Type: multipart/signed; boundary=Apple-Mail-64-90072523;
protocol="application/pkcs7-signature"; micalg=sha1
--Apple-Mail-64-90072523
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
charset=us-ascii
24 maj 2010 kl. 15:49 skrev Jeffrey Hutzelman:
> So, this would make the krb5 mech no longer be a GSS-API =
implementation.
> I suppose that's OK, if you assume that your mech is only ever going =
to be=20
> used with your mechglue. The problem is that as soon as more than one=20=
> implementor makes that assumption, you stop being able to use =
arbitrary=20
> sets of mechanisms -- you can only use sets of mechanisms for which =
there=20
> is a mechglue with which they are all compatible.
>=20
> What if I want to use your mechanism, but my OS/application/whatever=20=
> already has its own mechglue? What if I am building an application =
that I=20
> know needs only krb5 and has to run in limited space?
All good points, however duplicating code is multiple layers hides bugs =
and increases code size, either good either.
Love
--Apple-Mail-64-90072523--
--===============1491106252==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
--===============1491106252==--
