Re: Bug#421310: ITP: pam-krb5-migrate -- PAM module for migrating to Kerberos
Hi Steve, Russ,
Op vrijdag 27-04-2007 om 22:25 uur [tijdzone -0700], schreef Steve
Langasek:
> On Fri, Apr 27, 2007 at 10:12:59PM -0700, Russ Allbery wrote:
> > Steve Langasek <vorlon@debian.org> writes:
> > > On Fri, Apr 27, 2007 at 06:00:34PM -0700, Russ Allbery wrote:
>
> > >> How does it handle the Kerberos administrative operations? Is it
> > >> shelling out to kadmin, or did you find a better way to handle that?
>
> > > It links to libkadm5clnt. The code was written well before libkadm5 had
> > > a suitable public API, so it hasn't been packaged before now because any
> > > migrations I needed it for are long done. :)
>
> > libkadm5clnt still doesn't have a public API so far as I know, which is
> > one of the reasons why I was asking. Because the API is private and no
> > header files are available for it, I'm not sure how rigorous the shared
> > library versioning is between releases for packages that use the internal
> > interface. MIT generally reserves the right to break use of any symbol
> > that's not exported and documented in the public API.
>
> Ah, then I don't know. It's been several years since I spoke with Sam about
> wanting this API to be made public, and I'd pretty much put
> pam_krb5_migrate out of mind until Jelmer brought it up again. I'd taken
> his word for it that it was buildable now against the public header
> packages.
At the moment, I only build it against Heimdal, which does export these
symbols and provides them in public headers.
Building against MIT works, but requires the MIT source to be around.
I'll wait for #191616 to be fixed until providing packages against MIT.
Cheers,
Jelmer
Reply to: