Re: GSSAPI and realm lookup hook

[Love Hörnquist Åstrand <lha@kth.se>]

Hello Fred, Michael,

If you propose a plugin interface, I would happly add it to heimdal

Love


12 dec 2007 kl. 21.35 skrev Zeqing (Fred) Xia:

>
> That's right. I need to add specialized logic to determine the realm  
> name given a host name. The application will then be able to use its  
> own logic to influence the decision.
>
> Thanks.
>
>
>
> Fred
>
>
> -----Original Message-----
> From: Michael B Allen [mailto:miallen@ioplex.com]
> Sent: Wed 12/12/2007 9:48 AM
> To: Zeqing (Fred) Xia
> Cc: heimdal-discuss@sics.se
> Subject: Re: GSSAPI and realm lookup hook
>
> On Wed, 12 Dec 2007 09:22:20 -0800
> "Zeqing (Fred) Xia" <fxia@juniper.net> wrote:
>
>>
>> Thanks a lot for the info. I was going to patch  
>> krb5_get_host_realm() in get_host_realm.c.
>
> I see. You want the realms for a host, not the hosts for a realm. Yes,
> get_host_realm.c would be the right place to do that.
>
> I've overloaded that myself too but for different reasons no doubt  
> [1].
>
> Mike
>
> [1] http://www.stacken.kth.se/lists/heimdal-discuss/2007-03/msg00038.html
>
>> -----Original Message-----
>> From: Michael B Allen [mailto:miallen@ioplex.com]
>> Sent: Tue 12/11/2007 11:08 PM
>> To: Zeqing (Fred) Xia
>> Cc: heimdal-discuss@sics.se
>> Subject: Re: GSSAPI and realm lookup hook
>>
>> On Tue, 11 Dec 2007 18:48:15 -0800
>> "Zeqing (Fred) Xia" <fxia@juniper.net> wrote:
>>
>>> Hi All,
>>>
>>> I have a need to do realm lookup with a plugin, because the current
>>> realm determination logic, other than dns lookup, is not  
>>> sufficient for
>>> the scenario I'm dealing with.
>>
>> Hi Fred,
>>
>> Do you mean that you want to alter how Heimdal resolves servers given
>> a realm?
>>
>> I don't know about the new plugin code but I have found that  
>> replacing
>> lib/krb5/krbhst.c:srv_find_realm with my own implementation works
>> quite well since the data structures involved are isolated and
>> non-complicated.
>>
>> Mike
>>
>> -- 
>> Michael B Allen
>> PHP Active Directory SPNEGO SSO
>> http://www.ioplex.com/
>>
>
>
> -- 
> Michael B Allen
> PHP Active Directory SPNEGO SSO
> http://www.ioplex.com/
>