Re: Smbk5pwd and Heimdal 0.7 not playing nice?

["Henry B. Hotz" <hotz@jpl.nasa.gov>]

On Aug 2, 2005, at 7:15 PM, Howard Chu wrote:

> You cannot use two different Kerberos libraries in the same program.

In general.

However I'm playing with a Sun LDAP plugin that uses Heimdal while the  
Sun LDAP server itself links Sun's GSSAPI libraries.  The plugin does  
password checking, and the GSSAPI supports SASL binds.  The kerb 5 is  
used for different things, and I'm pretty sure I can get away with it.   
The plugin is statically linked against Heimdal.

Never say never.  ;-)

> As a general rule, the MIT Kerberos libraries are unsafe for use in  
> threaded programs. They are known to cause memory leaks and SEGVs when  
> linked into slapd. These problems do not occur when using the Heimdal  
> libraries. The OpenLDAP project recommends against using the MIT  
> libraries.

The MIT 1.4.x releases are thread safe.
------------------------------------------------------------------------ 
----
The opinions expressed in this message are mine,
not those of Caltech, JPL, NASA, or the US Government.
Henry.B.Hotz@jpl.nasa.gov, or hbhotz@oxy.edu