X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=TlWMPDYTJhV5x76tT5rt/HBl20tNZOC4lBF1SAw31bc4DfyTnUpBo
	f7XKTwYoOwSXJ/V7JqWMwubWlufTvK/t77LnaIfVTwKT6UWqvAciyu1T3dRE6BJ6
	NOe3A8bcmOxVl2y5KTQtENXxBbot/d5DQaoT7IBYtYtNLp9pRl/N6k=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; s=default;
	 bh=/dwq9chwA2D93QUedVrKZ8H2DDs=; b=GF0mn7AcUvUj81Z1dLTK7+KZ3g9U
	cOfvMXMuZQdfn4K2YslkHZ2WZV8BNucEShVIV4lvNaHuLaIAIjUyNWq4y2MIn6ru
	cSdDBdbyO1GkX2IvLVPzCByniF1bOe3qjgTwlqC8liqSiAJVW/MOQomj9BSPLZG5
	8jTMTjbD937Mc8U=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
X-Spam-SWARE-Status: No, score=-1.8 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=3.3.1
Date: Mon, 24 Jun 2013 11:10:12 +0200
From: Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: Packaging Heimdal for Cygwin was Re: Heimdal 1.5.2: "unknown mech-code 2529639054 for mech 1 3 6 1 4 1 311 2 2 10"
Message-ID: <20130624091012.GA14319@calimero.vinschen.de>
Reply-To: cygwin AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
References: <409A0E510096B044A0EE3778BB3F1F5C01379C903ECD AT EXMAIL DOT hrl DOT com> <51C33835 DOT 6000207 AT openafs DOT org> <409A0E510096B044A0EE3778BB3F1F5C01379C904127 AT EXMAIL DOT hrl DOT com> <51C38880 DOT 3090401 AT openafs DOT org> <20130621074355 DOT GE1620 AT calimero DOT vinschen DOT de> <51C45788 DOT 7080908 AT openafs DOT org> <20130621140733 DOT GF7362 AT calimero DOT vinschen DOT de> <51C48EE2 DOT 1000406 AT openafs DOT org>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
In-Reply-To: <51C48EE2.1000406@openafs.org>
User-Agent: Mutt/1.5.21 (2010-09-15)

On Jun 21 13:35, Jeffrey Altman wrote:
> Since Cygwin Heimdal is built as Linux without any platform specific
> credential cache support it will be restricted to using FILE: caches as
> a ticket store.  Microsoft Kerberos never uses FILE: based caches and
> native MIT and Heimdal distributions use them only when explicitly
> configured to.
> 
> The preferred location of a krb5.conf file on Windows is
> 
>   %ALLUSERSPROFILE%\Kerberos\krb5.conf
> 
> By reading the DOS formatted file stored at that location any configuration
> applied to native Kerberos library distributions will also be used by
> Cygwin applications.

Sorry if I'm dense but what does that mean exactly for Cygwin?  Assuming
the Cygwin heimdal package would use that file location, would it be only
able to interact correctly with other third part kerberos or heimdal
packages, or would it also work with the native stuff and AD?

> If Cygwin's /etc/krb5.conf is used the system administrator (often an
> end user without knowledge that Kerberos is even being used) must ensure
> that the two configuration files are synchronized to avoid inconsistent
> application behavior.
> 
> I guess that cygwin1.dll could special case /etc/krb5.conf and have it
> shadow %ALLUSERSPROFILE%\Kerberos\krb5.conf with appropriate end-of-line
> translations.

Not in the cygwin DLL.  THis would have to be done in the heimdal package.


Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple