Mechanism extensions and the GSSAPI

Jeffrey Altman jaltman at
Thu Apr 29 11:56:45 EDT 2004

Douglas E. Engert wrote:

>There may be some issues with regards to linking against shared libraries
>vs using dlopen/dlsym.  Many mechglue implementations use dlopen to 
>load a number of mechs. 
>If the application needs to use mech specific routines, and links against
>the mech shared library, it might pickup some additional or wrong entry
>points, since the actually implementation of the mech is not really 
>known until run time.   
>So the mech-specific/implementation-specific "glue shim" may need to be 
>their own shared or dynamic libraries and the use of dlopen with RTLD_GLOBAL
>vs RTLD_LOCAL may need to be looked at closely. 
Would it make sense to have a function which returns
a reference to the mech-specific library from the gss
layer?  We certainly would not want the mech specific
library to be multiply initialized.  Or to accidently
load the wrong implementation of it.

More information about the krbdev mailing list