[16271] in Kerberos_V5_Development
Re: Project Review: kinit -C
daemon@ATHENA.MIT.EDU (Simo Sorce)
Tue Sep 14 16:39:27 2010
Date: Tue, 14 Sep 2010 16:39:17 -0400
From: Simo Sorce <ssorce@redhat.com>
To: Sam Hartman <hartmans@mit.edu>
Message-ID: <20100914163917.3a8ceca6@willson.li.ssimo.org>
In-Reply-To: <tslfwxcnok4.fsf@live.mit.edu>
Mime-Version: 1.0
Cc: krbdev@mit.edu, Tom Yu <tlyu@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
On Tue, 14 Sep 2010 14:54:35 -0400
Sam Hartman <hartmans@MIT.EDU> wrote:
> >>>>> "Tom" == Tom Yu <tlyu@MIT.EDU> writes:
>
> Tom> Sam Hartman <hartmans@MIT.EDU> writes:
> >> As a result, kinit will link against libkdb5 and libkadm5srv.
>
> Tom> I would prefer that this be a build-time option, so that
> Tom> software packagers have more flexibility about whether the
> Tom> kinit binary needs to have the KDC libraries installed.
> Tom> Alternatively, build two versions, kinit and kinit.local,
> Tom> only the latter of which depends on the KDC libraries.
>
> I'd like to push back on this and ask for someone to step forward and
> say that's a problem for their packaging first before we make the
> change.
Unless you want to force people to install libkdb5 and libkadm5srv on
every client it looks like it is going to be an issue. That is, unless
you explicitly dlopen() these libraries therefore not making them a
strong dependency and breaking only the impersonation functionality if
they are not available.
Simo.
--
Simo Sorce * Red Hat, Inc * New York
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
