[1816] in Kerberos_V5_Development

home help back first fref pref prev next nref lref last post

Re: Krb5 Ccache DLL proposal

daemon@ATHENA.MIT.EDU (Theodore Y. Ts'o)
Fri Sep 27 18:41:07 1996

Date: Fri, 27 Sep 1996 18:40:47 -0400
From: "Theodore Y. Ts'o" <tytso@MIT.EDU>
To: "Barry Jaspan" <bjaspan@MIT.EDU>
Cc: "Theodore Y. Ts'o" <tytso@MIT.EDU>, mikec@geek.grf.ov.com,
        harryc@cam.ov.com, pbh@MIT.EDU, krbdev@MIT.EDU, dosdev@MIT.EDU
In-Reply-To: Barry Jaspan's message of Fri, 27 Sep 1996 13:49:32 -0400,
	<9609271749.AA03404@DUN-DUN-NOODLES.MIT.EDU>

   Date: Fri, 27 Sep 1996 13:49:32 -0400
   From: "Barry Jaspan" <bjaspan@MIT.EDU>

   - You define cc_typed_data but do not talk at all about the legal or
   defined values for type.  If they are all application-defined, you
   should say so.  However, since the addresses field is a cc_typed_data,
   I doubt *all* of them are app defined.

Cc_typed_data are used as part of cc_creds, which the ccache DLL must
store and retrieve on demand; it shouldn't touch it or otherwise modify
it.

But yes, given that we're working with different implementations, we are
going to have to explode out what the definitions of krb5_address and
krb5_keyblock are.  OK, I'll work on that....

   - There is no explicit versioning information in the api.  Is that
   handled by some standard DLL mechanism?  If so, will that be
   translateable into Unix implementations of this api?  If not, perhaps
   it should be explicitly versioned.

I think we will need an explicit versioning scheme, since I don't think
windows will provide that.  Thanks for suggesting that.

   - There is no function to deallocate the cc_creds allocated by
   cc_seq_fetch.  Also, also it is implicit in the type definitions, you
   should state explicitly the allocation scheme (caller allocates
   structure, callee allocates contents).

Umm... yes; there was supposed to be one.  Thanks for noticing the
oversight.

   - cc_lock/unlock specify no-modify locks.  There is different from the
   normal shared/exclusive lock semantics; why?

We probably do need to revist the lock semantics.  Shared/exclusive is
probably a better idea.

   - What happens if you call cc_lock multiple times?

"Behavior undefined"; the caller shouldn't do that.

						- Ted



home help back first fref pref prev next nref lref last post