On Thu, 2023-02-23 at 10:20 +0100, Florian Weimer wrote:
> The example program uses internal APIs not present in the public header
> file (krb5_gen_portaddr, krb5_gen_replay_name; the THIS IS UGLY part).
> Are there alternatives part of the public API?
> 
> The issue here is that the example code has leaked outside of krb5 to
> other projects, and it only builds there because current compilers still
> support implicit function declarations.  I would like to give guidance
> to the external users, but unfortunately I don't know anything about
> Kerberos.

Wherever possible you should recommend people use GSSAPI and not krb5
APIs directly, unless they are building tools specifically to manage
aspects of krb5 (acquiring tickets, managing ccaches, etc.)

Simo.

-- 
Simo Sorce
RHEL Crypto Team
Red Hat, Inc




________________________________________________
Kerberos mailing list           [email protected]
https://mailman.mit.edu/mailman/listinfo/kerberos

Reply via email to