Re: Using GSSAPI without implicit static/global variables

[Love <lha@stacken.kth.se>]

Andrew Bartlett <abartlet@samba.org> writes:

> On Sun, 2005-02-13 at 00:45 +1100, Luke Howard wrote:
>> >The particular use case I'm worried about is when we have the client
>> >libraries used in a threaded manner, such that two different kerberos
>> >principals are being used to contact two different servers.  It would
>> >seem impossible to do this in a thread-safe manner, because at the very
>> >least, the ccache is tied to the gss_krb5_context, and is therefore a
>> >global variable.  Even without threads, it looks messy to swtich around
>> >the ccache before all the respective calls.
>> 
>> A credentials cache is associated with a GSS credentials handle, not a
>> context. But it's true that there is no way to bind a ccache to a cred
>> handle without calling gss_krb5_ccache_name(), for which calls must be
>> serialized.
>
> Assuming I create new calls that do all the things required to make this
> sane, what is the correct forum to make them 'standard'.  I presume
> kitten?

Yes, the issue is a kitten issue. From the kitten charter:

o Thread safety restrictions

Love

PGP signature