RFR 6722928: Support SSPI as a native GSS-API provider

Nico Williams Nico.Williams at twosigma.com
Mon Dec 31 06:36:40 UTC 2018


On Fri, Dec 28, 2018 at 09:07:04PM +0800, Weijun Wang wrote:
> If we are not going to use or implement new functions defined in RFC 5587, I
> doubt if this is useful.

Using pointers to incomplete structs is much better than pointers to
void: you get static type safety.  When we made that change in Solaris'
libgss we found at least one serious bug.

> And I don't think we can rewrite existing declarations in gssapi.h to use
> these const types. Or can we?

Actually, you can.  Heimdal and MIT made those changes.

Nico
-- 



More information about the security-dev mailing list