Question on PAC and principal APIs project

[Tom Yu]

"Henry B. Hotz" <hotz at jpl.nasa.gov> writes:

> On Feb 9, 2009, at 12:45, Natalie Li wrote:
>> Ken,
>>
>> Thanks for the information.  I'll take a look at the alpha version
>> later today.  Would like to confirm the following:
>>
>> 1) the provided APIs are sufficient for a resource server to extract
>> the PAC from the ticket in KRB_AP_REQ. 2) All the APIs mentioned in
>> the project page (http://k5wiki.kerberos.org/wiki?title=Projects/PAC_and_principal_APIs&redirect=no
>> ) will be in the 1.7 release.
>
> I gather there is no relationship to the Heimdal/Samba API's for the  
> same functions.  (I have not tried the Heimdal ones.)

I have not compared these APIs in detail, but our new principal
parsing APIs appear identical to Heimdal.

> I'm not saying there needs to be a direct relationship.  Where I get  
> the most bent is when things are *almost* the same.  Then you waste a  
> lot of time trying to make them the same, and tripping on the  
> unanticipated differences.

If you have specific examples, please let us know about them, so we
can work on them.