Discussion of krb5_get_init_creds_password() behaviorwasRe:problem with the kinit_prompter in kfw 2.5

[Jeffrey Altman]

Ken Hornstein wrote:

>"Maybe".  I've been looking at it a bit; changing the prototypes and
>the upper-level code is easy enough.  What to do at the lower-level seems
>to be a bit trickier.
>

>What do people think about changing krb5int_sendto() to return the address
>of the host it finally got a reply from?  Then it would be easy to match
>that address against one of the master addresses.  If that's okay,
>then I could probably cook that up before I head off to Seoul.
>
>I was thinking of something like:
>
>krb5int_sendto(krb5_context ctx, const krb5_data *message,
>	       const struct addrlist *addrs, krb5_data *reply,
>	       struct sockaddr *localaddr, socklen_t *localaddrlen,
>	       struct sockaddr *remoteaddr, socklen_t *remoteaddrlen)
>
>(The last two arguments are the new ones).
>
>
This is the approach I was considering as well.
After making this change we must also remember to
update the gssapi library which uses krb5int_sendto
via the accessor library. 

- Jeff