[18886] in Kerberos_V5_Development
Re: any hidden dependency for krb5_context?
daemon@ATHENA.MIT.EDU (Greg Hudson)
Wed Jul 2 17:38:42 2014
Message-ID: <53B47BD4.9010309@mit.edu>
Date: Wed, 02 Jul 2014 17:38:28 -0400
From: Greg Hudson <ghudson@mit.edu>
MIME-Version: 1.0
To: Bin Lu <blu@paloaltonetworks.com>, "krbdev@mit.edu" <krbdev@mit.edu>
In-Reply-To: <841A051D8BD4144AA7B5AC63D97F9F05B25EC7@sjccmbxpw01p.paloaltonetworks.local>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
Apologies for the slow response.
On 06/17/2014 03:16 PM, Bin Lu wrote:
> I just noticed that in the profile structure of the krb5_context object, it contains the profile filename instead of the content. And I tested if I do not remove the configuration file, it works too in other threads.
The filename and content are both saved. We re-read the file if we
detect that it changed; I guess if the file goes away, we might discard
the contents.
> But this is not what I want as we might have multiple krb5_context objects with different config files. How can I enforce krb5_init_context() to save the content of the profile, not just the file name?
In krb5 1.10 we added the ability to create profile objects using a
vtable of callbacks:
http://web.mit.edu/kerberos/krb5-latest/doc/plugindev/profile.html
http://k5wiki.kerberos.org/wiki/Projects/Pluggable_configuration
You can then use krb5_init_context_profile to use the created profile
object.
There are a couple of enhancements we'd like to have, but haven't yet
implemented:
* The ability to create an empty profile (not backed by any file) and
just set values in it.
* The ability to make GSSAPI use a designated krb5_context so that a
context created using a specified profile object can be used with GSSAPI.
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
