[18869] in Kerberos_V5_Development
Re: any hidden dependency for krb5_context?
daemon@ATHENA.MIT.EDU (Greg Hudson)
Tue Jun 17 13:00:06 2014
Message-ID: <53A0740B.5060403@mit.edu>
Date: Tue, 17 Jun 2014 12:59:55 -0400
From: Greg Hudson <ghudson@mit.edu>
MIME-Version: 1.0
To: Bin Lu <blu@paloaltonetworks.com>, "krbdev@mit.edu" <krbdev@mit.edu>
In-Reply-To: <841A051D8BD4144AA7B5AC63D97F9F05B25BAC@sjccmbxpw01p.paloaltonetworks.local>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
On 06/16/2014 06:57 PM, Bin Lu wrote:
> Initialize several krb5_context in one thread and put it in a global (pool) structure, then other threads get krb5_context from the pool and do the real work.
This ought to work, as long as you don't use the same krb5_context in
multiple threads at the same time. I don't have any guesses as to why
you would be getting KRB5_REALM_CANT_RESOLVE when using a context in a
different thread from the one it was initialized in.
> I thought the realm should have been resolved during krb5_init_context() from env("KRB5_CONFIG").
The profile is read at krb5_init_context time, and is queried when we
actually need to send a message to the KDC. But that should work from
any thread.
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
