[20509] in Kerberos_V5_Development

home help back first fref pref prev next nref lref last post

Re: Using std::regex for pkinit on Windows

daemon@ATHENA.MIT.EDU (Ken Hornstein via krbdev)
Sat Nov 23 13:39:15 2024

Message-Id: <202411231838.4ANIco9l016749@hedwig.cmf.nrl.navy.mil>
To: "Greg Hudson" <ghudson@mit.edu>
cc: krbdev@mit.edu
In-Reply-To: <dadd6019-9a0b-4e32-a3c2-70934925e368@mit.edu>
MIME-Version: 1.0
Date: Sat, 23 Nov 2024 13:38:49 -0500
From: Ken Hornstein via krbdev <krbdev@mit.edu>
Reply-To: Ken Hornstein <kenh@cmf.nrl.navy.mil>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu

>On 11/22/24 21:30, Ken Hornstein via krbdev wrote:> What comes to mind, 
>though, is should this code be specific to PKINIT
>> or to the rest of the krb5 libraries in general?
>
>I would ideally put it in libkrb5support (util/support) and use it to 
>enable localauth_rule.c on Windows, in addition to PKINIT.  I don't 
>think there should be a dependency issue; as far as I can tell this 
>should be in the same UCRT library we rely on for C stuff on Windows.

In terms of mechanics, are you thinking of having every caller make
calls into krb5int_regcomp() (and associated functions) and put the
compatibility glue in libkrb5support?

There is some support for older regular expression libraries that use
the functions compile() and re_comp().  I don't know if I can test that
because I am not sure that I have access to systems that use those
functions anymore; is that compatibility still useful?  Does it make
sense going forward to assume all platforms will have a regular expression
library available?

--Ken
_______________________________________________
krbdev mailing list             krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev

home help back first fref pref prev next nref lref last post