64-bit KFW Status
Jeffrey Altman
jaltman at secure-endpoints.com
Wed Sep 5 14:44:17 EDT 2007
It is now possible to build KFW for AMD64 using the pismere cvs head and
krb5 svn trunk.
* CCAPIv2 has been ported to Visual Studio 2005 and AMD64. It is
possible to communicate with either the 64-bit or 32-bit ccache
servers from either ccache library. The limitations of this port
are that time_t is still a 32-bit value in the ccache server and
the implementation is still CCAPIv2 which lacks clock skew
adjustments, locking, and callback notifications when the
credential cache contents change. The ccache server is also per
session so it does not behave well under Vista UAC.
* leashw32.dll has been ported to AMD64. All Kerberos v4 and krb524
support is disabled in the AMD64 build. The purpose of the
leashw64.dll is to provide gss_acquire_cred() the ability to query
NIM for credentials.
* kclient and krbv4w32 libraries are not built for AMD64
* krb524.dll and k524init.exe are not build for AMD64
* kinit.exe, klist.exe, kdestroy.exe are built without krb4 support.
* leash32.exe is not built for AMD64
* The NSIS installer is not built for AMD64
* The MSI installer is built for AMD64. It uses a unique
UpgradeCode to permit parallel installs of 32-bit and 64-bit
MSIs. The 64-bit MSI and the 32-bit NSIS cannot be installed on
the same machine.
Open Issues:
* 32-bit MSI must be modified to not install kfwlogon.dll in 64-bit
WOW environments
* Both the 32-bit and 64-bit NetIDMgr.exe can be installed on the
same machine. Only one instance of NIM is permitted. Need to
decide which version should be installed by default for automatic
startup.
* Must confirm that src/windows/build properly generates
site-local.wxi for Visual Studio 2005 and AMD64.
Jeffrey Altman
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3355 bytes
Desc: S/MIME Cryptographic Signature
Url : http://mailman.mit.edu/pipermail/kfwdev/attachments/20070905/9fa8ab87/attachment.bin
More information about the kfwdev
mailing list