Sanity check: re-exporting krb5_auth_con_set_req_cksumtype

Greg Hudson ghudson at MIT.EDU
Mon Nov 16 05:55:33 EST 2009


On Mon, 2009-11-16 at 05:04 -0500, Luke Howard wrote:
> Also, can we have some auth_con subkey accessors that return krb5_keys  
> instead of krb5_keyblocks?

Yeah, I thought about doing that myself, to eliminate some unnecessary
key duplication in the GSSAPI code, but eventually settled on the side
of laziness.

Since we already have krb5_key reference counting, the hardest part is
choosing names, since we can't rename the old functions to say
"keyblock" instead of "key".  Perhaps appending _k to the original
functions would be sufficiently evocative:

  krb5_auth_con_getkey_k
  krb5_auth_con_getsendsubkey_k
  krb5_auth_con_getrecvsubkey_k





More information about the krbdev mailing list