Re: Negotiation problem on Solaris

Jari Ahonen <jah@xxxxxxxxxxxx> writes:

>> Unfortunately, there's no way to support this with versions
>> prior to 1.4 while still suppressing the replay cache since
>> 1.3 did not provide a way to programmatically turn it off.

> That's not entirely correct. MIT 1.3 allows you to do your
> own replay cache implementation and register it with
> krb5_rc_register_type API call.

As near as I can tell, that's not a supported part of the MIT 1.3 API.
All of the krb5_rc_* function prototypes are protected by #if
KRB5_PRIVATE and even there I don't see a prototype of a function with
that name.  That means it probably breaks in 1.4 as well.  :/

It's unfortunate that there isn't a better API for this.  Setting
environment variables isn't horribly appealing either.

-- 
Russ Allbery (rra@xxxxxxxxxxxx)             <http://www.eyrie.org/~eagle/>


-------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642