Re: a gserver patch

[Derek R. Price]

Mei-Hui Su wrote:

>   As part of the Globus Project (www.globus.org), we
> have developed a PKI based GSSAPI implementation called
> the Grid Security infrastructure (GSI).  As part of this

[. . .]


>   We are interested in using GSI with cvs. With cvs's
> gserver, the GSI should just plugin and work. But we
> found that the implementation of the server's use of
> the GSS-API is not completely complient with the

[. . .]


> diff -u -r cvs/configure cvs-1.11/configure
> --- cvs/configure       Thu Apr 26 13:54:31 2001
> +++ cvs-1.11/configure  Tue Aug  1 09:13:25 2000

You shouldn't change the configure file.  You should change configure.in and 
run autoconf to generate confiugre.


> diff -u -r cvs/src/server.c cvs-1.11/src/server.c
> --- cvs/src/server.c    Fri Apr 20 10:23:49 2001
> +++ cvs-1.11/src/server.c       Fri Jul 28 13:18:40 2000

[. . .]


> -#ifdef HAVE_KERBEROS
>  /* We use Kerberos 5 routines to map the GSSAPI credential to a user
>     name.  */
>  #include <krb5.h>
> -#endif
> -
> -#ifdef HAVE_GSI
> -/* We use GSI's gridmap routines to map the GSSAPI credential to a user
> -   name.  */
> -#include <globus_gss_assist.h>
> -#endif

Shouldn't you have been able to use GSSAPI to rewrite the client and server 
both in such a way that they didn't care
what sort of authentication mechanism was hiding behind the GSSAPI 
(Kerberos/GSI/whatever)?  Why didn't you?

Derek

--
Derek Price                      CVS Solutions Architect ( http://CVSHome.org )
mailto:dprice@collab.net         CollabNet ( http://collab.net )
--
82. Hold a hard drive to your ear -- listen to the C.