DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=TlWMPDYTJhV5x76tT5rt/HBl20tNZOC4lBF1SAw31bc4DfyTnUpBo
	f7XKTwYoOwSXJ/V7JqWMwubWlufTvK/t77LnaIfVTwKT6UWqvAciyu1T3dRE6BJ6
	NOe3A8bcmOxVl2y5KTQtENXxBbot/d5DQaoT7IBYtYtNLp9pRl/N6k=
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
Date: Mon, 24 Jun 2013 11:10:12 +0200
From: Corinna Vinschen <corinna-cygwin@cygwin.com>
To: cygwin@cygwin.com
Subject: Re: Packaging Heimdal for Cygwin was Re: Heimdal 1.5.2: "unknown mech-code 2529639054 for mech 1 3 6 1 4 1 311 2 2 10"
Message-ID: <20130624091012.GA14319@calimero.vinschen.de>
Reply-To: cygwin@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
References: <409A0E510096B044A0EE3778BB3F1F5C01379C903ECD@EXMAIL.hrl.com> <51C33835.6000207@openafs.org> <409A0E510096B044A0EE3778BB3F1F5C01379C904127@EXMAIL.hrl.com> <51C38880.3090401@openafs.org> <20130621074355.GE1620@calimero.vinschen.de> <51C45788.7080908@openafs.org> <20130621140733.GF7362@calimero.vinschen.de> <51C48EE2.1000406@openafs.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
In-Reply-To: <51C48EE2.1000406@openafs.org>
User-Agent: Mutt/1.5.21 (2010-09-15)

On Jun 21 13:35, Jeffrey Altman wrote:
> Since Cygwin Heimdal is built as Linux without any platform specific
> credential cache support it will be restricted to using FILE: caches as
> a ticket store.  Microsoft Kerberos never uses FILE: based caches and
> native MIT and Heimdal distributions use them only when explicitly
> configured to.
> 
> The preferred location of a krb5.conf file on Windows is
> 
>   %ALLUSERSPROFILE%\Kerberos\krb5.conf
> 
> By reading the DOS formatted file stored at that location any configuration
> applied to native Kerberos library distributions will also be used by
> Cygwin applications.

Sorry if I'm dense but what does that mean exactly for Cygwin?  Assuming
the Cygwin heimdal package would use that file location, would it be only
able to interact correctly with other third part kerberos or heimdal
packages, or would it also work with the native stuff and AD?

> If Cygwin's /etc/krb5.conf is used the system administrator (often an
> end user without knowledge that Kerberos is even being used) must ensure
> that the two configuration files are synchronized to avoid inconsistent
> application behavior.
> 
> I guess that cygwin1.dll could special case /etc/krb5.conf and have it
> shadow %ALLUSERSPROFILE%\Kerberos\krb5.conf with appropriate end-of-line
> translations.

Not in the cygwin DLL.  THis would have to be done in the heimdal package.


Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple