xorg/app/xhost: [PATCH] Remove support for old kerberos5 api.

Paulo César Pereira de Andrade pcpa at mandriva.com.br
Wed Feb 4 11:57:26 PST 2009


Alan Coopersmith wrote:
> I think it would be better to restore the definition of
> FamilyKrb5Principal
> to libXau - while it may not be used by the current code, it is
> defined/reserved for Kerberos5 and if a new implementation of that code
> was done using current API's, we'd presumably want to use the same family
> id for it.    That constant at least is part of the network protocol, not
> the local implementation.

  That is a more "correct" solution. But would that value be used
for "modern" Kerberos5 api? Probably should be, as it still is
kerberos, and 5 :-) (so I presume only the programming API/ABI
changed, but not the "protocol"), and would replace code that
apparently has only compiled by "2 or 3 peoples" in the past
15 years.

> (Though should someone really want to do this, our security people have
>  suggested a new GSS-API authentication method might be a better idea
>  than a Kerberos5 specific one, but that's up to whoever is doing the
> work.)

Paulo




More information about the xorg mailing list