1.3.4: kadmin tries to open log file R/W (II)

John Hascall john at iastate.edu
Fri Sep 3 15:41:59 EDT 2004

> The kadmin client is built in both a networked form and a local form.
> kadmin.local needs to run on a KDC host with privileges to read/write
> the KDB, and the server-side kadm5 library it uses does need to do
> some logging.

> The kadmin client code itself is identical; only the library with
> which it is linked is different.  Unfortunately, the kadmin client
> code cannot easily distinguish between running in local mode on a KDC
> host and running as a networked client, so it too attempts to open the
> logfile.

> Fixing this problem correctly would probably involve giving the kadmin
> client a means of determining whether it is running as a local client
> or as a networked client.

That seems trivial.  Have a routine that exists in both libraries
that returns something different:

libkadm5clnt: int kadm5_is_local ( void ) { return 0; }
libkadm5srv:  int kadm5_is_local ( void ) { return 1; }

or some such.  Or am I missing something?


More information about the Kerberos mailing list