Exporting gssapi context, take two

Sam Hartman hartmans at MIT.EDU
Tue Apr 27 16:10:11 EDT 2004


>>>>> "Kevin" == Kevin Coffman <kwc at citi.umich.edu> writes:

    Kevin> Any suggestions for a cleaner/clearer approach?

Have a glue cred_t that can easily be distinguished from a mechanism
cred_t.  Have the mech specific function decide whether it is a glue
cred and call a routine in the glue layer to coerce the cred to the
right type.

You'll also need to discuss in this forum how we want to deal with
calling mechanism specific functions in a glue environment.

Adding the mechanism-specific functions to the glue layer is clearly
the wrong answer though.

--Sam



More information about the krbdev mailing list