Proposition for new remctl ACL scheme / group support

Jeffrey Altman jaltman at secure-endpoints.com
Sat Apr 5 19:43:34 EDT 2014


On 4/5/2014 3:34 PM, Russ Allbery wrote:
>
> The only other thing that I'm not sure about is how annoying it is to set
> up and tear down the libraries that let you do PTS queries.  I'm pretty
> aggressive about making sure that the remctl server is entirely clean
> about memory allocation and free and not leaking file descriptors to child
> processes, and the OpenAFS libraries often have some difficulties there.

If you want to be able to load and unload the libraries then you cannot
link to anything that includes OpenAFS rx.   rx will start background
threads and those threads cannot safely be stopped using the OpenAFS
implementation.

Jeffrey Altman




More information about the Kerberos mailing list