living in a multi-mech world

[Nicolas Williams]

On Tue, May 01, 2007 at 12:11:16PM -0400, Sam Hartman wrote:
> >>>>> "Tom" == Tom Yu <tlyu at MIT.EDU> writes:
>     Tom> I think it's reasonable for someone to want to have a SPNEGO
>     Tom> mechanism support only the krb5 mech, for example, so the
>     Tom> SPNEGO mech could load the krb5 mech and dlsym() the GSS-API
>     Tom> entry points.
> 
> I think this is overly complex.

And since SPNEGO would still have to pass the right OID / other
mechanism context to the krb5 mech there'd be zero benefit to
dlopen()ing the mechanism directly instead of using a mechglue
(provided, of course, that there is a mechglue).

> You can specify a specific oid into the mechglue.

You have to.