[15829] in Kerberos_V5_Development

home help back first fref pref prev next nref lref last post

Re: Sanity check: GSSAPI SPI simplifications

daemon@ATHENA.MIT.EDU (=?iso-8859-1?Q?Love_H=F6rnquist_=C)
Mon May 24 21:14:34 2010

X-KTH-mail-from: lha@kth.se
Mime-Version: 1.0 (Apple Message framework v1148)
From: =?iso-8859-1?Q?Love_H=F6rnquist_=C5strand?= <lha@kth.se>
In-Reply-To: <CD1CF89724AA83857D6EBABF@minbar.fac.cs.cmu.edu>
Date: Mon, 24 May 2010 18:13:35 -0700
Message-Id: <13D0E62C-E6AC-4F12-8354-AB0A44EA518D@kth.se>
To: Jeffrey Hutzelman <jhutz@cmu.edu>
Cc: "krbdev@mit.edu" <krbdev@mit.edu>,
   Nicolas Williams <nicolas.williams@oracle.com>
Content-Type: multipart/mixed; boundary="===============1112206049=="
Errors-To: krbdev-bounces@mit.edu


--===============1112206049==
Content-Type: multipart/signed; boundary=Apple-Mail-64-90072523;
	protocol="application/pkcs7-signature"; micalg=sha1


--Apple-Mail-64-90072523
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=us-ascii


24 maj 2010 kl. 15:49 skrev Jeffrey Hutzelman:

> So, this would make the krb5 mech no longer be a GSS-API =
implementation.
> I suppose that's OK, if you assume that your mech is only ever going =
to be=20
> used with your mechglue.  The problem is that as soon as more than one=20=

> implementor makes that assumption, you stop being able to use =
arbitrary=20
> sets of mechanisms -- you can only use sets of mechanisms for which =
there=20
> is a mechglue with which they are all compatible.
>=20
> What if I want to use your mechanism, but my OS/application/whatever=20=

> already has its own mechglue?  What if I am building an application =
that I=20
> know needs only krb5 and has to run in limited space?

All good points, however duplicating code is multiple layers hides bugs =
and increases code size, either good either.

Love


--Apple-Mail-64-90072523--

--===============1112206049==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
krbdev mailing list             krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev

--===============1112206049==--

home help back first fref pref prev next nref lref last post