On Wed, Nov 5, 2014 at 1:47 PM, Booker Bense <bbe...@gmail.com> wrote:
> [1]-  a process can have more than one krb5_context, but let's not get too
> crazy.

GSS-API acceptor apps that use the default acceptor credential can
trivially be in "multiple realms" at once in one process.  I've
certainly seen this happen, and even set it up.

For this and other reasons I don't think it's a good idea to tie
"realm" to "process".  It's not too inaccurate, but it's not helpful
enough to be worth the trouble.

Nico
--
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

Reply via email to