logo_kerberos.gif

Difference between revisions of "Projects/Improve GSSAPI mechanism configuration"

From K5Wiki
Jump to: navigation, search
(New page: ==Requirements and scope== The GSSAPI mechglue allows the installation of additional mechanisms, these mechanisms are currently sourced from the file /etc/gss/mech at library load time. ...)
 
Line 1: Line 1:
  +
{{project-early}}
  +
{{project-target|1.13}}
   
 
==Requirements and scope==
  
==Requirements and scope==

Revision as of 13:16, 18 October 2013

This is an early stage project for MIT Kerberos. It is being fleshed out by its proponents. Feel free to help flesh out the details of this project. After the project is ready, it will be presented for review and approval.


This project is targeted at release 1.13.


Requirements and scope

The GSSAPI mechglue allows the installation of additional mechanisms, these mechanisms are currently sourced from the file /etc/gss/mech at library load time.

In order to improve management of additional mechanism as separate packages for distributions it would be easier if ech package could drop a configuration fragment in a separate file to activate a new installed plugin instead of changing a signle configuration file.

Design

A new directory owned by the GSSAPI library is created in /etc/gss/mech.d In this directory packages can drop configuration fragments that use the exact same configuration format of the current /etc/gss/mech file.

After the main /etc/gss/mech file has been parsed, any file in this directory is opened and parsed to find additional mechanisms to load.

Retrieved from "https://k5wiki.kerberos.org/wiki?title=Projects/Improve_GSSAPI_mechanism_configuration&oldid=5237"