Re: Packaging Heimdal for Cygwin was Re: Heimdal 1.5.2: "unknown mech-code 2529639054 for mech 1 3 6 1 4 1 311 2 2 10"

[Corinna Vinschen <corinna-cygwin at cygwin dot com>]

On Jun 21 13:35, Jeffrey Altman wrote:
> Since Cygwin Heimdal is built as Linux without any platform specific
> credential cache support it will be restricted to using FILE: caches as
> a ticket store.  Microsoft Kerberos never uses FILE: based caches and
> native MIT and Heimdal distributions use them only when explicitly
> configured to.
> 
> The preferred location of a krb5.conf file on Windows is
> 
>   %ALLUSERSPROFILE%\Kerberos\krb5.conf
> 
> By reading the DOS formatted file stored at that location any configuration
> applied to native Kerberos library distributions will also be used by
> Cygwin applications.

Sorry if I'm dense but what does that mean exactly for Cygwin?  Assuming
the Cygwin heimdal package would use that file location, would it be only
able to interact correctly with other third part kerberos or heimdal
packages, or would it also work with the native stuff and AD?

> If Cygwin's /etc/krb5.conf is used the system administrator (often an
> end user without knowledge that Kerberos is even being used) must ensure
> that the two configuration files are synchronized to avoid inconsistent
> application behavior.
> 
> I guess that cygwin1.dll could special case /etc/krb5.conf and have it
> shadow %ALLUSERSPROFILE%\Kerberos\krb5.conf with appropriate end-of-line
> translations.

Not in the cygwin DLL.  THis would have to be done in the heimdal package.


Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple