GSSAPI contexts used in multiple threads

Russ Allbery rra at
Tue Mar 4 14:13:31 EST 2008

Sam Hartman <hartmans at> writes:

>>>>>> "Russ" == Russ Allbery <rra at> writes:
>     Russ> The answer from Howard is that OpenLDAP treats the stream as
>     Russ> full duplex.  His message explaining more details is at:
> I'd kind of expect that to work today based on my knowledge of the code.

It's quite possible that it does and that I'd just misunderstood the
guarantees.  OpenLDAP had trouble in the past but I think it was stable
(if slow due to the replay cache) under load with a recent MIT Kerberos,
but threading bugs can be hard to find even under heavy load.

Russ Allbery (rra at             <>

More information about the krbdev mailing list