[16272] in Kerberos_V5_Development
Re: Project Review: kinit -C
daemon@ATHENA.MIT.EDU (Sam Hartman)
Tue Sep 14 17:03:22 2010
From: Sam Hartman <hartmans@mit.edu>
To: Simo Sorce <ssorce@redhat.com>
Date: Tue, 14 Sep 2010 17:03:02 -0400
In-Reply-To: <20100914163917.3a8ceca6@willson.li.ssimo.org> (Simo Sorce's
message of "Tue, 14 Sep 2010 16:39:17 -0400")
Message-ID: <tsllj74m41l.fsf@live.mit.edu>
MIME-Version: 1.0
Cc: krbdev@mit.edu, Tom Yu <tlyu@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
>>>>> "Simo" == Simo Sorce <ssorce@redhat.com> writes:
Simo> On Tue, 14 Sep 2010 14:54:35 -0400
Simo> Sam Hartman <hartmans@MIT.EDU> wrote:
> >>>>> "Tom" == Tom Yu <tlyu@MIT.EDU> writes:
>>
Tom> Sam Hartman <hartmans@MIT.EDU> writes:
>> >> As a result, kinit will link against libkdb5 and libkadm5srv.
>>
Tom> I would prefer that this be a build-time option, so that
Tom> software packagers have more flexibility about whether the
Tom> kinit binary needs to have the KDC libraries installed.
Tom> Alternatively, build two versions, kinit and kinit.local, only
Tom> the latter of which depends on the KDC libraries.
>>
>> I'd like to push back on this and ask for someone to step forward
>> and say that's a problem for their packaging first before we make
>> the change.
Simo> Unless you want to force people to install libkdb5 and
Simo> libkadm5srv on every client it looks like it is going to be an
Simo> issue. That is, unless you explicitly dlopen() these libraries
Simo> therefore not making them a strong dependency and breaking
Simo> only the impersonation functionality if they are not
Simo> available.
Right. I was going to recommend installing libkdb5 and libkadm5srv
everywhere. Personally, I don't see a problem with that with my Debian
hat on, but if other packagers do, then we can look at approaches.
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
