Problem with kerberos and ssh.

[Russ Allbery]

Wyllys Ingersoll <wyllys.ingersoll at sun.com> writes:

> Linking directly to libgssapi_krb5 is a hack and is generally not going
> to be a portable solution.

> There are actually GSSAPI implementations that support more than just
> Kerberos mechanisms (Solaris and others).  If you hardcode your app to
> link directly to the underlying mechanism library instead of the proper
> GSSAPI library itself, you are then venturing into a sort of
> pseudo-gssapi/KRB5 area that is neither Kerberos nor GSSAPI and will
> likely fail to port to other systems.

libgssapi_krb5 *is* the generic GSSAPI dispatch layer for the MIT
implementation.  It exports all of the generic GSSAPI functions.  It only
has one underlying mechanism, but the MIT code is structured so that you
could add additional ones.

-- 
Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>