Re: Bug#421310: ITP: pam-krb5-migrate -- PAM module for migrating to Kerberos
On Fri, Apr 27, 2007 at 10:12:59PM -0700, Russ Allbery wrote:
> Steve Langasek <vorlon@debian.org> writes:
> > On Fri, Apr 27, 2007 at 06:00:34PM -0700, Russ Allbery wrote:
> >> How does it handle the Kerberos administrative operations? Is it
> >> shelling out to kadmin, or did you find a better way to handle that?
> > It links to libkadm5clnt. The code was written well before libkadm5 had
> > a suitable public API, so it hasn't been packaged before now because any
> > migrations I needed it for are long done. :)
> libkadm5clnt still doesn't have a public API so far as I know, which is
> one of the reasons why I was asking. Because the API is private and no
> header files are available for it, I'm not sure how rigorous the shared
> library versioning is between releases for packages that use the internal
> interface. MIT generally reserves the right to break use of any symbol
> that's not exported and documented in the public API.
Ah, then I don't know. It's been several years since I spoke with Sam about
wanting this API to be made public, and I'd pretty much put
pam_krb5_migrate out of mind until Jelmer brought it up again. I'd taken
his word for it that it was buildable now against the public header
packages.
--
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer to set it on, and I can move the world.
vorlon@debian.org http://www.debian.org/
Reply to: