Re: Which gss calls may block on IO

2017-04-14 Thread Simo Sorce
On Fri, 2017-04-14 at 22:15 +0300, Isaac Boukris wrote: > On Fri, Apr 14, 2017 at 6:53 PM, Greg Hudson wrote: > > On 04/14/2017 08:26 AM, Isaac Boukris wrote: > >> If I only acquire credentials for krb5 mech, can I assume that > >> gss_accpet would not block on IO? > > > > I think that's true, ass

Re: Which gss calls may block on IO

2017-04-14 Thread Isaac Boukris
On Fri, Apr 14, 2017 at 6:53 PM, Greg Hudson wrote: > On 04/14/2017 08:26 AM, Isaac Boukris wrote: >> If I only acquire credentials for krb5 mech, can I assume that >> gss_accpet would not block on IO? > > I think that's true, assuming the keytab and profile and /etc/gss/mech > file aren't on a ne

Re: Which gss calls may block on IO

2017-04-14 Thread Greg Hudson
On 04/14/2017 08:26 AM, Isaac Boukris wrote: > If I only acquire credentials for krb5 mech, can I assume that > gss_accpet would not block on IO? I think that's true, assuming the keytab and profile and /etc/gss/mech file aren't on a network filesystem. In the future we might have pluggable keyta