RFR 6722928: Support SSPI as a native GSS-API provider
Nico Williams
Nico.Williams at twosigma.com
Mon Dec 31 06:36:40 UTC 2018
On Fri, Dec 28, 2018 at 09:07:04PM +0800, Weijun Wang wrote:
> If we are not going to use or implement new functions defined in RFC 5587, I
> doubt if this is useful.
Using pointers to incomplete structs is much better than pointers to
void: you get static type safety. When we made that change in Solaris'
libgss we found at least one serious bug.
> And I don't think we can rewrite existing declarations in gssapi.h to use
> these const types. Or can we?
Actually, you can. Heimdal and MIT made those changes.
Nico
--
More information about the security-dev
mailing list