Mei-Hui Su wrote:
> As part of the Globus Project (www.globus.org), we
> have developed a PKI based GSSAPI implementation called
> the Grid Security infrastructure (GSI). As part of this
[. . .]
> We are interested in using GSI with cvs. With cvs's
> gserver, the GSI should just plugin and work. But we
> found that the implementation of the server's use of
> the GSS-API is not completely complient with the
[. . .]
> diff -u -r cvs/configure cvs-1.11/configure
> --- cvs/configure Thu Apr 26 13:54:31 2001
> +++ cvs-1.11/configure Tue Aug 1 09:13:25 2000
You shouldn't change the configure file. You should change configure.in and run
autoconf to generate confiugre.
> diff -u -r cvs/src/server.c cvs-1.11/src/server.c
> --- cvs/src/server.c Fri Apr 20 10:23:49 2001
> +++ cvs-1.11/src/server.c Fri Jul 28 13:18:40 2000
[. . .]
> -#ifdef HAVE_KERBEROS
> /* We use Kerberos 5 routines to map the GSSAPI credential to a user
> name. */
> #include <krb5.h>
> -#endif
> -
> -#ifdef HAVE_GSI
> -/* We use GSI's gridmap routines to map the GSSAPI credential to a user
> - name. */
> -#include <globus_gss_assist.h>
> -#endif
Shouldn't you have been able to use GSSAPI to rewrite the client and server both in
such a way that they didn't care
what sort of authentication mechanism was hiding behind the GSSAPI
(Kerberos/GSI/whatever)? Why didn't you?
Derek
--
Derek Price CVS Solutions Architect ( http://CVSHome.org )
mailto:[EMAIL PROTECTED] CollabNet ( http://collab.net )
--
82. Hold a hard drive to your ear -- listen to the C.
_______________________________________________
Bug-cvs mailing list
[EMAIL PROTECTED]
http://mail.gnu.org/mailman/listinfo/bug-cvs
