xorg/app/xhost: [PATCH] Remove support for old kerberos5 api.
Paulo César Pereira de Andrade
pcpa at mandriva.com.br
Wed Feb 4 11:57:26 PST 2009
Alan Coopersmith wrote:
> I think it would be better to restore the definition of
> FamilyKrb5Principal
> to libXau - while it may not be used by the current code, it is
> defined/reserved for Kerberos5 and if a new implementation of that code
> was done using current API's, we'd presumably want to use the same family
> id for it. That constant at least is part of the network protocol, not
> the local implementation.
That is a more "correct" solution. But would that value be used
for "modern" Kerberos5 api? Probably should be, as it still is
kerberos, and 5 :-) (so I presume only the programming API/ABI
changed, but not the "protocol"), and would replace code that
apparently has only compiled by "2 or 3 peoples" in the past
15 years.
> (Though should someone really want to do this, our security people have
> suggested a new GSS-API authentication method might be a better idea
> than a Kerberos5 specific one, but that's up to whoever is doing the
> work.)
Paulo
More information about the xorg
mailing list