advice on kerberizing products
Simon Wilkinson
simon at sxw.org.uk
Wed Apr 23 16:17:08 EDT 2008
On 23 Apr 2008, at 20:23, Ken Hornstein wrote:
>>
> 1) Dynamically load all Kerberos functions at runtime with dlopen() or
> the equivalent.
>
> 2) Encapsulate all of your Kerberos functionality into an open-source
> module or program and have your customers compile that
> particular bit
> themselves.
>
> 3) Include with your product a complete copy of whatever Kerberos
> implementation you prefer.
4) Use GSSAPI
If you only need the functionality that the GSSAPI interface
provides, then using it can be far more portable than native Kerberos
calls. For example, Mozilla ships precompiled binaries for both
Firefox and Thunderbird which work with any vendor's GSSAPI libarary.
S.
More information about the Kerberos
mailing list