Sam Hartman <[EMAIL PROTECTED]> writes:

> Be aware that there is special code to try and disable the replay
> cache in mod-auth-kerb; it may interact badly with changes in krb5.

I must say that it's tempting to just set KRB5RCACHETYPE to "none".  Alas,
that's probably a bad idea in an Apache module due to the annoying global
and inherited nature of environment variables.

It would be nice to have some way of passing that kind of setting into the
library.  As near as I can tell, there isn't one; am I overlooking some
convenient API?

The special code to disable the replay cache is extremely ugly and
intrusive and won't even compile against krb5 1.4.3, so I'm sure that's
what broke.

-- 
Russ Allbery ([EMAIL PROTECTED])               <http://www.eyrie.org/~eagle/>


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to