Fw: Kerberos MIT on Solaris

[Douglas E. Engert]

On 8/23/2010 2:33 PM, Will Fiveash wrote:
> On Mon, Aug 23, 2010 at 09:35:08AM -0500, Douglas E. Engert wrote:
>>
>> On 8/22/2010 12:33 PM, vir vir wrote:
>>> Hi Will,
>>>
>>>
>>> On Salaris 9 can't find a library libkrb5.so
>>>
>>> On Salaris 10 I can't  find a library libgssapi_krb5.so that has
>>> gss_krb5_ccache_name,
>>
>> On Solaris 10, use something like:
>>           CPPFLAGS="-I/usr/include/kerberosv5"
>>           LDFLAGS="/usr/lib/gss/mech_krb5.so -R/usr/lib/gss"
>
> Note that linking this way is unsupported as there are a bunch of
> private interfaces (functions) that could be changed without violating
> the advertised stability level.  At this point Solaris offers libgss
> (Interface Stability == Committed), libsasl (Interface Stability ==
> Committed) and libkrb5 (Interface Stability == Volatile) as supported
> APIs to access krb security.  Doing anything else is not supported and
> has a greater risk of breaking with updates and new releases.  See the
> Interface Stability section of the attributes.5 man page for more
> information on this topic.

Understood. But if the existing application is using Kerberos APIs,
and can not be converted to use GSS that is one of the risks one takes.

>

-- 

  Douglas E. Engert  <DEEngert at anl.gov>
  Argonne National Laboratory
  9700 South Cass Avenue
  Argonne, Illinois  60439
  (630) 252-5444