Re: Thread-safe libraries

2004-03-01 Thread Donn Cave
In article [EMAIL PROTECTED], [EMAIL PROTECTED] (Sam Hartman) wrote: Lukas == Lukas Kubin [EMAIL PROTECTED] writes: Lukas Is there any progress in the ability of Kerberos libraries Lukas on Linux to be used by threads-enabled applications? I'm Lukas still having troubles

Re: Thread-safe libraries

2004-02-28 Thread Sam Hartman
Lukas == Lukas Kubin [EMAIL PROTECTED] writes: Lukas Sam Hartman wrote: Lukas == Lukas Kubin [EMAIL PROTECTED] writes: Lukas How complicated is it to move to Heimdal from MIT? I need Lukas a solution to enable users' authentication to LDAP in our Lukas network which uses

Re: Thread-safe libraries

2004-02-27 Thread Lukas Kubin
Sam Hartman wrote: Lukas == Lukas Kubin [EMAIL PROTECTED] writes: Lukas How complicated is it to move to Heimdal from MIT? I need Lukas a solution to enable users' authentication to LDAP in our Lukas network which uses MIT Kerberos 5. What do you use? On a Debian system using the

Re: Thread-safe libraries

2004-02-25 Thread Lukas Kubin
How complicated is it to move to Heimdal from MIT? I need a solution to enable users' authentication to LDAP in our network which uses MIT Kerberos 5. What do you use? Originally I (after I've found I can't use MIT's kerberos with OpenLDAP) wished to try to use the krb5kdc LDAP schema and let

Re: Thread-safe libraries

2004-02-25 Thread Ken Hornstein
It is also worth noting, that, while Heimdal is not thread safe (at least there are no guarantees), it has proven to be much more thread-robust than MIT. OpenLDAP page and a couple of users have expirienced problems with MIT and threaded OpenLDAP server, while Heimdal performed flawlessly. It

Re: Thread-safe libraries

2004-02-25 Thread Sam Hartman
Ken == Ken Hornstein [EMAIL PROTECTED] writes: It is also worth noting, that, while Heimdal is not thread safe (at least there are no guarantees), it has proven to be much more thread-robust than MIT. OpenLDAP page and a couple of users have expirienced problems with MIT and

Re: Thread-safe libraries

2004-02-25 Thread Sam Hartman
Lukas == Lukas Kubin [EMAIL PROTECTED] writes: Lukas How complicated is it to move to Heimdal from MIT? I need Lukas a solution to enable users' authentication to LDAP in our Lukas network which uses MIT Kerberos 5. What do you use? On a Debian system using the native LDAP, install

Re: Thread-safe libraries

2004-02-25 Thread Sam Hartman
Cesar == Cesar Garcia [EMAIL PROTECTED] writes: Cesar wrt to gssapi and 1.3.1 ... Cesar Since we're pointing out lack of replay cache detection, Cesar note that if acquiring creds for GSS_C_NO_NAME, then no Cesar replay cache is used. (specifically looking at 1.3.1 - Cesar

Re: Thread-safe libraries

2004-02-25 Thread Ken Hornstein
I think that's false. I believe that krb5_rd_req will end up setting up a rcache later. I think Cesar is right, actually. krb5_rd_req will only set up a replay cache if you pass in the server argument, which is set from creds-princ, which is NULL if you call the gss function with

Re: Thread-safe libraries

2004-02-25 Thread Cesar Garcia
According to strace ... 1.2.8 app server with named credential - opens an rcache. 1.3.1 app server with no credential - no evidence of rcache being opened. wrt to krb5_rd_req - it looks like rcache is obtained only if auth_context_flags includes KRB5_AUTH_CONTEXT_DO_TIME. accept_sec_context

Re: Thread-safe libraries

2004-02-25 Thread Ken Hornstein
According to strace ... 1.2.8 app server with named credential - opens an rcache. 1.3.1 app server with no credential - no evidence of rcache being opened. Hm, regarding my previous note It looks like I was wrong, krb5_rd_req() will get a replay cache even if the passed-in server is NULL,

Thread-safe libraries

2004-02-24 Thread Lukas Kubin
Is there any progress in the ability of Kerberos libraries on Linux to be used by threads-enabled applications? I'm still having troubles using sasl kerberos authentication to ldap server on Linux (Debian). It always fails when parallel connection appears. Is there any solution for this now?

RE: Thread-safe libraries

2004-02-24 Thread Tim Alsop
. -Original Message- From: Lukas Kubin [mailto:[EMAIL PROTECTED] Sent: 24 February 2004 12:11 To: [EMAIL PROTECTED] Subject: Thread-safe libraries Is there any progress in the ability of Kerberos libraries on Linux to be used by threads-enabled applications? I'm still having troubles using

Re: Thread-safe libraries

2004-02-24 Thread Sam Hartman
Lukas == Lukas Kubin [EMAIL PROTECTED] writes: Lukas Is there any progress in the ability of Kerberos libraries Lukas on Linux to be used by threads-enabled applications? I'm Lukas still having troubles using sasl kerberos authentication to Lukas ldap server on Linux (Debian).

Re: Thread-safe libraries

2004-02-24 Thread Nikola Milutinovic
Sam Hartman wrote: Lukas == Lukas Kubin [EMAIL PROTECTED] writes: Lukas Is there any progress in the ability of Kerberos libraries Lukas on Linux to be used by threads-enabled applications? I'm Lukas still having troubles using sasl kerberos authentication to Lukas ldap server

Re: Thread-safe libraries

2004-02-24 Thread Luke Howard
It is also worth noting, that, while Heimdal is not thread safe (at least there are no guarantees), it has proven to be much more thread-robust than MIT. OpenLDAP page and a couple of users have expirienced problems with MIT and threaded OpenLDAP server, while Heimdal performed flawlessly. It