[17217] in Kerberos_V5_Development

home help back first fref pref prev next nref lref last post

Re: [PATCH] Make krb5-config suppress CFLAGS output and omit extra

daemon@ATHENA.MIT.EDU (Russ Allbery)
Mon Sep 26 12:58:08 2011

From: Russ Allbery <rra@stanford.edu>
To: "krbdev\@mit.edu" <krbdev@mit.edu>
In-Reply-To: <201109261651.p8QGpRA4014612@hedwig.cmf.nrl.navy.mil> (Ken
	Hornstein's message of "Mon, 26 Sep 2011 12:51:27 -0400")
Date: Mon, 26 Sep 2011 09:58:04 -0700
Message-ID: <87aa9rtf4z.fsf@windlord.stanford.edu>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu

Ken Hornstein <kenh@cmf.nrl.navy.mil> writes:

> FWIW, I always assumed that Kerberos functions _were_ available when you
> ran krb5-config --libs gssapi (why?  Well, because they were).  I'm not
> saying that my assumption is necessarily valid, but in looking at
> krb5-config I see that it only says what Sam has noted ("GSSAPI
> application with Kerberos 5 bindings"), and I find that spetacularly
> vague.  I guess if I was starting cold I'd look at the list of libraries
> it output, see that "-lkrb5" was included, and figure that it would be
> safe to assume that you'd get krb5 symbols as well (I guess when it
> comes to Kerberos programming, I'm more de facto than de jure).

Given that, maybe the way forward would be to introduce a new gssapi-only
"type" that would omit the Kerberos library and leave gssapi alone for
backwards compatibility.

-- 
Russ Allbery (rra@stanford.edu)             <http://www.eyrie.org/~eagle/>
_______________________________________________
krbdev mailing list             krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev

home help back first fref pref prev next nref lref last post