Calls to internal functions from client plugins

Kevin Coffman kwc at
Mon Oct 2 20:25:10 EDT 2006

On 10/2/06, Sam Hartman <hartmans at> wrote:
> Keep in mind that client side plugins cannot generally depend on being
> able to call functions from k5-int.h.
> On all platforms we're trying to tighten up the export list and remove
> private symbols.  On Windows and Mac we have a fairly tight export
> list and would not add symbols in order for plugins to call them.
> Instead, take a look at the krb5int_accessor function in k5-int.h for
> a mechansim for getting to call internal functions.

I've successfully used Nalin's plugin code (w/o use of k5-int.h in our
plugin) for both client and KDC.  (not all functionality there yet)

My next step is to try pulling our pkinit-specific asn.1 stuff out of
libkrb5 and putting it in the plug-in code, using only the exported
asn1 functionality from libkrb5.  Does this sound reasonable?


More information about the krbdev mailing list