another public api question

[Sam Hartman]

>>>>> "Jeffrey" == Jeffrey Altman <jaltman at columbia.edu> writes:

    Jeffrey> I know that this one is going to start a long thread:
    Jeffrey> krb5_get_profile()

    Jeffrey> This function has been exported for a while.  There has
    Jeffrey> been much argument over the years as to whether or not
    Jeffrey> applications should be using the profile_XXXX() functions
    Jeffrey> or not.  However, removing this function does not stop
    Jeffrey> applications from linking to and using the profile
    Jeffrey> library directly.  All it does is prevent the application
    Jeffrey> from conveniently finding out which profile is being used
    Jeffrey> by Kerberos 5.

I think we've actually gotten a fairly consistent internal position on
that.  We've decided that the interface you proposed, and committed is
a reasonable compromise and that the app_defaults stuff is fine, but
the raw profile interface is not something we want to expose.