[krbdev.mit.edu #3612] krb5_gss_canicalize_name calls back through glue

Tom Yu via RT rt-comment at krbdev.mit.edu
Tue Jun 20 01:44:20 EDT 2006


>>>>> "kwc" == The RT System itself via RT <rt-comment at krbdev.mit.edu> writes:

kwc> 	krb5_gss_canonicalize_name() returns the result of gss_duplicate_name().
kwc> 	In a multi-mechanism mechglue environment, this winds up calling back
kwc> 	through the glue layer instead of calling krb5_gss_duplicate_name()
kwc> 	directly.  In this case, a krb5_principal pointer is interpreted
kwc> 	as a gss_union_name_t pointer in the glue layer.

krb5_gss_canonicalize_name() is not called by the mechglue layer.  It
is also not a public function.  I'm not sure we can support calling
the krb5 mechanism gssapi functions by their krb5_gss_* names rather
than through the mechglue layer (using specified C-bindings entry
points) now that mechglue is integrated.  Perhaps we should just
delete the file where we define krb5_gss_canonicalize_name().

---Tom




More information about the krb5-bugs mailing list