oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

Introduce macro for common plugin structure elements

Browse Source 
Heimdal's HDB plugin interface, and hence Samba's KDC that depends upon
it, doesn't work on 32-bit builds due to structure fields being arranged
in the wrong order. This problem presents itself in the form of
segmentation faults on 32-bit systems, but goes unnoticed on 64-bit
builds thanks to extra structure padding absorbing the errant fields.

This commit reorders the HDB plugin structure fields to prevent crashes
and introduces a common macro to ensure every plugin presents a
consistent interface.

Samba BUG: https://bugzilla.samba.org/show_bug.cgi?id=15110

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
This commit is contained in:
Joseph Sutton
2022-10-22 10:11:53 +13:00
committed by Nico Williams
parent 16179383fb
commit cfb32a638e
17 changed files with 57 additions and 63 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
kdc/csr_authorizer_plugin.h
View File

@@ -62,9 +62,7 @@
* @ingroup krb5_support * @ingroup krb5_support
*/ */
typedef struct krb5plugin_csr_authorizer_ftable_desc { typedef struct krb5plugin_csr_authorizer_ftable_desc {
int minor_version; HEIM_PLUGIN_FTABLE_COMMON_ELEMENTS(krb5_context);
krb5_error_code (KRB5_LIB_CALL *init)(krb5_context, void **);
void (KRB5_LIB_CALL *fini)(void *);
krb5_error_code (KRB5_LIB_CALL *authorize)(void *, /*plug_ctx*/ krb5_error_code (KRB5_LIB_CALL *authorize)(void *, /*plug_ctx*/
krb5_context, /*context*/ krb5_context, /*context*/
const char *, /*app*/ const char *, /*app*/

4
kdc/gss_preauth_authorizer_plugin.h
View File

@@ -60,9 +60,7 @@
*/ */
typedef struct krb5plugin_gss_preauth_authorizer_ftable_desc { typedef struct krb5plugin_gss_preauth_authorizer_ftable_desc {
int minor_version; HEIM_PLUGIN_FTABLE_COMMON_ELEMENTS(krb5_context);
krb5_error_code (KRB5_LIB_CALL *init)(krb5_context, void **);
void (KRB5_LIB_CALL *fini)(void *);
krb5_error_code (KRB5_LIB_CALL *authorize)(void *, /*plug_ctx*/ krb5_error_code (KRB5_LIB_CALL *authorize)(void *, /*plug_ctx*/
astgs_request_t, /*r*/ astgs_request_t, /*r*/
gss_const_name_t, /*initiator_name*/ gss_const_name_t, /*initiator_name*/

4
kdc/kdc-plugin.h
View File

@@ -120,9 +120,7 @@ typedef krb5_error_code
#define KRB5_PLUGIN_KDC_VERSION_10 10 #define KRB5_PLUGIN_KDC_VERSION_10 10
typedef struct krb5plugin_kdc_ftable { typedef struct krb5plugin_kdc_ftable {
int minor_version; HEIM_PLUGIN_FTABLE_COMMON_ELEMENTS(krb5_context);
krb5_error_code (KRB5_CALLCONV *init)(krb5_context, void **);
void (KRB5_CALLCONV *fini)(void *);
krb5plugin_kdc_pac_generate pac_generate; krb5plugin_kdc_pac_generate pac_generate;
krb5plugin_kdc_pac_verify pac_verify; krb5plugin_kdc_pac_verify pac_verify;
krb5plugin_kdc_client_access client_access; krb5plugin_kdc_client_access client_access;

4
kdc/token_validator_plugin.h
View File

@@ -67,9 +67,7 @@
* @ingroup krb5_support * @ingroup krb5_support
*/ */
typedef struct krb5plugin_token_validator_ftable_desc { typedef struct krb5plugin_token_validator_ftable_desc {
int minor_version; HEIM_PLUGIN_FTABLE_COMMON_ELEMENTS(krb5_context);
krb5_error_code (KRB5_LIB_CALL *init)(krb5_context, void **);
void (KRB5_LIB_CALL *fini)(void *);
krb5_error_code (KRB5_LIB_CALL *validate)(void *, /*plug_ctx*/ krb5_error_code (KRB5_LIB_CALL *validate)(void *, /*plug_ctx*/
krb5_context, krb5_context,
const char *, /*realm*/ const char *, /*realm*/

6
lib/base/common_plugin.h
View File

@@ -36,6 +36,8 @@
#ifndef HEIMDAL_BASE_COMMON_PLUGIN_H #ifndef HEIMDAL_BASE_COMMON_PLUGIN_H
#define HEIMDAL_BASE_COMMON_PLUGIN_H #define HEIMDAL_BASE_COMMON_PLUGIN_H
#include <heimbase-svc.h>
#ifdef _WIN32 #ifdef _WIN32
# ifndef HEIM_CALLCONV # ifndef HEIM_CALLCONV
# define HEIM_CALLCONV __stdcall # define HEIM_CALLCONV __stdcall
@@ -69,9 +71,7 @@ typedef heim_get_instance_func_t krb5_get_instance_t;
* All plugin function tables extend the following structure. * All plugin function tables extend the following structure.
*/ */
struct heim_plugin_common_ftable_desc { struct heim_plugin_common_ftable_desc {
int version; HEIM_PLUGIN_FTABLE_COMMON_ELEMENTS(heim_pcontext);
int (HEIM_LIB_CALL *init)(heim_pcontext, void **);
void (HEIM_LIB_CALL *fini)(void *);
}; };
typedef struct heim_plugin_common_ftable_desc heim_plugin_common_ftable; typedef struct heim_plugin_common_ftable_desc heim_plugin_common_ftable;
typedef struct heim_plugin_common_ftable_desc *heim_plugin_common_ftable_p; typedef struct heim_plugin_common_ftable_desc *heim_plugin_common_ftable_p;

5
lib/base/heimbase-svc.h
View File

@@ -75,4 +75,9 @@
heim_dict_t attributes; \ heim_dict_t attributes; \
int32_t error_code int32_t error_code
#define HEIM_PLUGIN_FTABLE_COMMON_ELEMENTS(CONTEXT_TYPE) \
int minor_version; \
int (HEIM_LIB_CALL *init)(CONTEXT_TYPE, void **); \
void (HEIM_LIB_CALL *fini)(void *)
#endif /* HEIMBASE_SVC_H */ #endif /* HEIMBASE_SVC_H */

2
lib/base/plugin.c
View File

@@ -653,7 +653,7 @@ reduce_by_version(heim_object_t value, void *ctx, int *stop)
struct iter_ctx *s = ctx; struct iter_ctx *s = ctx;
struct heim_plugin *pl = value; struct heim_plugin *pl = value;
if (pl->ftable && pl->ftable->version >= s->caller->min_version) if (pl->ftable && pl->ftable->minor_version >= s->caller->min_version)
heim_array_append_value(s->result, pl); heim_array_append_value(s->result, pl);
} }

4
lib/hdb/hdb-ldap.c
View File

@@ -2097,18 +2097,18 @@ fini(void *ctx)
struct hdb_method hdb_ldap_interface = { struct hdb_method hdb_ldap_interface = {
HDB_INTERFACE_VERSION, HDB_INTERFACE_VERSION,
0 /*is_file_based*/, 0 /*can_taste*/,
init, init,
fini, fini,
0 /*is_file_based*/, 0 /*can_taste*/,
"ldap", "ldap",
hdb_ldap_create hdb_ldap_create
}; };
struct hdb_method hdb_ldapi_interface = { struct hdb_method hdb_ldapi_interface = {
HDB_INTERFACE_VERSION, HDB_INTERFACE_VERSION,
0 /*is_file_based*/, 0 /*can_taste*/,
init, init,
fini, fini,
0 /*is_file_based*/, 0 /*can_taste*/,
"ldapi", "ldapi",
hdb_ldapi_create hdb_ldapi_create
}; };

40
lib/hdb/hdb.c
View File

@@ -66,41 +66,41 @@ const int hdb_interface_version = HDB_INTERFACE_VERSION;
static struct hdb_method methods[] = { static struct hdb_method methods[] = {
/* "db:" should be db3 if we have db3, or db1 if we have db1 */ /* "db:" should be db3 if we have db3, or db1 if we have db1 */
#if HAVE_DB3 #if HAVE_DB3
{ HDB_INTERFACE_VERSION, 1 /*is_file_based*/, 1 /*can_taste*/, NULL, NULL, { HDB_INTERFACE_VERSION, NULL, NULL, 1 /*is_file_based*/, 1 /*can_taste*/,
"db:", hdb_db3_create}, "db:", hdb_db3_create},
#elif HAVE_DB1 #elif HAVE_DB1
{ HDB_INTERFACE_VERSION, 1, 1, NULL, NULL, "db:", hdb_db1_create}, { HDB_INTERFACE_VERSION, NULL, NULL, 1, 1, "db:", hdb_db1_create},
#endif #endif
#if HAVE_DB1 #if HAVE_DB1
{ HDB_INTERFACE_VERSION, 1, 1, NULL, NULL, "db1:", hdb_db1_create}, { HDB_INTERFACE_VERSION, NULL, NULL, 1, 1, "db1:", hdb_db1_create},
#endif #endif
#if HAVE_DB3 #if HAVE_DB3
{ HDB_INTERFACE_VERSION, 1, 1, NULL, NULL, "db3:", hdb_db3_create}, { HDB_INTERFACE_VERSION, NULL, NULL, 1, 1, "db3:", hdb_db3_create},
#endif #endif
#if HAVE_DB1 #if HAVE_DB1
{ HDB_INTERFACE_VERSION, 1, 1, NULL, NULL, "mit-db:", hdb_mitdb_create}, { HDB_INTERFACE_VERSION, NULL, NULL, 1, 1, "mit-db:", hdb_mitdb_create},
#endif #endif
#if HAVE_LMDB #if HAVE_LMDB
{ HDB_INTERFACE_VERSION, 1, 1, NULL, NULL, "mdb:", hdb_mdb_create}, { HDB_INTERFACE_VERSION, NULL, NULL, 1, 1, "mdb:", hdb_mdb_create},
{ HDB_INTERFACE_VERSION, 1, 1, NULL, NULL, "lmdb:", hdb_mdb_create}, { HDB_INTERFACE_VERSION, NULL, NULL, 1, 1, "lmdb:", hdb_mdb_create},
#endif #endif
#if HAVE_NDBM #if HAVE_NDBM
{ HDB_INTERFACE_VERSION, 1, 0, NULL, NULL, "ndbm:", hdb_ndbm_create}, { HDB_INTERFACE_VERSION, NULL, NULL, 1, 0, "ndbm:", hdb_ndbm_create},
#endif #endif
#ifdef HAVE_SQLITE3 #ifdef HAVE_SQLITE3
{ HDB_INTERFACE_VERSION, 1, 1, NULL, NULL, "sqlite:", hdb_sqlite_create}, { HDB_INTERFACE_VERSION, NULL, NULL, 1, 1, "sqlite:", hdb_sqlite_create},
#endif #endif
/* The keytab interface can't use its hdb_open() method to "taste" a DB */ /* The keytab interface can't use its hdb_open() method to "taste" a DB */
{ HDB_INTERFACE_VERSION, 1, 0, NULL, NULL, "keytab:", hdb_keytab_create}, { HDB_INTERFACE_VERSION, NULL, NULL, 1, 0, "keytab:", hdb_keytab_create},
/* The rest are not file-based */ /* The rest are not file-based */
#if defined(OPENLDAP) && !defined(OPENLDAP_MODULE) #if defined(OPENLDAP) && !defined(OPENLDAP_MODULE)
{ HDB_INTERFACE_VERSION, 0, 0, NULL, NULL, "ldap:", hdb_ldap_create}, { HDB_INTERFACE_VERSION, NULL, NULL, 0, 0, "ldap:", hdb_ldap_create},
{ HDB_INTERFACE_VERSION, 0, 0, NULL, NULL, "ldapi:", hdb_ldapi_create}, { HDB_INTERFACE_VERSION, NULL, NULL, 0, 0, "ldapi:", hdb_ldapi_create},
#elif defined(OPENLDAP) #elif defined(OPENLDAP)
{ HDB_INTERFACE_VERSION, 0, 0, NULL, NULL, "ldap:", NULL}, { HDB_INTERFACE_VERSION, NULL, NULL, 0, 0, "ldap:", NULL},
{ HDB_INTERFACE_VERSION, 0, 0, NULL, NULL, "ldapi:", NULL}, { HDB_INTERFACE_VERSION, NULL, NULL, 0, 0, "ldapi:", NULL},
#endif #endif
{ 0, 0, 0, NULL, NULL, NULL, NULL} { 0, NULL, NULL, 0, 0, NULL, NULL}
}; };
/** /**
@@ -494,19 +494,19 @@ hdb_init_db(krb5_context context, HDB *db)
*/ */
#if defined(HAVE_LMDB) #if defined(HAVE_LMDB)
static struct hdb_method default_dbmethod = static struct hdb_method default_dbmethod =
{ HDB_INTERFACE_VERSION, 1, 1, NULL, NULL, "", hdb_mdb_create }; { HDB_INTERFACE_VERSION, NULL, NULL, 1, 1, "", hdb_mdb_create };
#elif defined(HAVE_DB3) #elif defined(HAVE_DB3)
static struct hdb_method default_dbmethod = static struct hdb_method default_dbmethod =
{ HDB_INTERFACE_VERSION, 1, 1, NULL, NULL, "", hdb_db3_create }; { HDB_INTERFACE_VERSION, NULL, NULL, 1, 1, "", hdb_db3_create };
#elif defined(HAVE_DB1) #elif defined(HAVE_DB1)
static struct hdb_method default_dbmethod = static struct hdb_method default_dbmethod =
{ HDB_INTERFACE_VERSION, 1, 1, NULL, NULL, "", hdb_db1_create }; { HDB_INTERFACE_VERSION, NULL, NULL, 1, 1, "", hdb_db1_create };
#elif defined(HAVE_NDBM) #elif defined(HAVE_NDBM)
static struct hdb_method default_dbmethod = static struct hdb_method default_dbmethod =
{ HDB_INTERFACE_VERSION, 0, 1, NULL, NULL, "", hdb_ndbm_create }; { HDB_INTERFACE_VERSION, NULL, NULL, 0, 1, "", hdb_ndbm_create };
#else #else
static struct hdb_method default_dbmethod = static struct hdb_method default_dbmethod =
{ 0, 0, 0, NULL, NULL, NULL, NULL}; { 0, NULL, NULL, 0, 0, NULL, NULL};
#endif #endif
static int static int

4
lib/hdb/hdb.h
View File

@@ -307,11 +307,9 @@ typedef struct HDB {
#define HDB_INTERFACE_VERSION 11 #define HDB_INTERFACE_VERSION 11
struct hdb_method { struct hdb_method {
int version; HEIM_PLUGIN_FTABLE_COMMON_ELEMENTS(krb5_context);
unsigned int is_file_based:1; unsigned int is_file_based:1;
unsigned int can_taste:1; unsigned int can_taste:1;
krb5_error_code (*init)(krb5_context, void **);
void (*fini)(void *);
const char *prefix; const char *prefix;
krb5_error_code (*create)(krb5_context, HDB **, const char *filename); krb5_error_code (*create)(krb5_context, HDB **, const char *filename);
}; };

8
lib/hdb/test_namespace.c
View File

@@ -243,17 +243,17 @@ struct hdb_method hdb_test =
#ifdef WIN32 #ifdef WIN32
/* Not c99 */ /* Not c99 */
HDB_INTERFACE_VERSION, HDB_INTERFACE_VERSION,
1 /*is_file_based*/, 1 /*can_taste*/,
hdb_test_init, hdb_test_init,
hdb_test_fini, hdb_test_fini,
1 /*is_file_based*/, 1 /*can_taste*/,
"test", "test",
hdb_test_create hdb_test_create
#else #else
.version = HDB_INTERFACE_VERSION, .minor_version = HDB_INTERFACE_VERSION,
.is_file_based = 1,
.can_taste = 1,
.init = hdb_test_init, .init = hdb_test_init,
.fini = hdb_test_fini, .fini = hdb_test_fini,
.is_file_based = 1,
.can_taste = 1,
.prefix = "test", .prefix = "test",
.create = hdb_test_create .create = hdb_test_create
#endif #endif

6
lib/kadm5/kadm5-hook.h
View File

@@ -35,6 +35,8 @@
#define KADM5_HOOK_VERSION_V1 1 #define KADM5_HOOK_VERSION_V1 1
#include <heimbase-svc.h>
/* /*
* Each hook is called before the operation using KADM5_STAGE_PRECOMMIT and * Each hook is called before the operation using KADM5_STAGE_PRECOMMIT and
* then after the operation using KADM5_STAGE_POSTCOMMIT. If the hook returns * then after the operation using KADM5_STAGE_POSTCOMMIT. If the hook returns
@@ -53,9 +55,7 @@ enum kadm5_hook_stage {
#define KADM5_HOOK_FLAG_CONDITIONAL 0x2 /* only change password if different */ #define KADM5_HOOK_FLAG_CONDITIONAL 0x2 /* only change password if different */
typedef struct kadm5_hook_ftable { typedef struct kadm5_hook_ftable {
int version; HEIM_PLUGIN_FTABLE_COMMON_ELEMENTS(krb5_context);
krb5_error_code (KRB5_CALLCONV *init)(krb5_context, void **data);
void (KRB5_CALLCONV *fini)(void *data);
const char *name; const char *name;
const char *vendor; const char *vendor;

6
lib/krb5/an2ln_plugin.h
View File

@@ -36,6 +36,8 @@
#ifndef HEIMDAL_KRB5_AN2LN_PLUGIN_H #ifndef HEIMDAL_KRB5_AN2LN_PLUGIN_H
#define HEIMDAL_KRB5_AN2LN_PLUGIN_H 1 #define HEIMDAL_KRB5_AN2LN_PLUGIN_H 1
#include <heimbase-svc.h>
#define KRB5_PLUGIN_AN2LN "an2ln" #define KRB5_PLUGIN_AN2LN "an2ln"
#define KRB5_PLUGIN_AN2LN_VERSION_0 0 #define KRB5_PLUGIN_AN2LN_VERSION_0 0
@@ -80,9 +82,7 @@ typedef krb5_error_code (KRB5_LIB_CALL *set_result_f)(void *, const char *);
* @ingroup krb5_support * @ingroup krb5_support
*/ */
typedef struct krb5plugin_an2ln_ftable_desc { typedef struct krb5plugin_an2ln_ftable_desc {
int minor_version; HEIM_PLUGIN_FTABLE_COMMON_ELEMENTS(krb5_context);
krb5_error_code (KRB5_LIB_CALL *init)(krb5_context, void **);
void (KRB5_LIB_CALL *fini)(void *);
krb5_error_code (KRB5_LIB_CALL *an2ln)(void *, krb5_context, const char *, krb5_error_code (KRB5_LIB_CALL *an2ln)(void *, krb5_context, const char *,
krb5_const_principal, set_result_f, void *); krb5_const_principal, set_result_f, void *);
} krb5plugin_an2ln_ftable; } krb5plugin_an2ln_ftable;

6
lib/krb5/db_plugin.h
View File

@@ -33,6 +33,8 @@
#ifndef HEIMDAL_KRB5_DB_PLUGIN_H #ifndef HEIMDAL_KRB5_DB_PLUGIN_H
#define HEIMDAL_KRB5_DB_PLUGIN_H 1 #define HEIMDAL_KRB5_DB_PLUGIN_H 1
#include <heimbase-svc.h>
#define KRB5_PLUGIN_DB "krb5_db_plug" #define KRB5_PLUGIN_DB "krb5_db_plug"
#define KRB5_PLUGIN_DB_VERSION_0 0 #define KRB5_PLUGIN_DB_VERSION_0 0
@@ -59,9 +61,7 @@
* @ingroup krb5_support * @ingroup krb5_support
*/ */
typedef struct krb5plugin_db_ftable_desc { typedef struct krb5plugin_db_ftable_desc {
int minor_version; HEIM_PLUGIN_FTABLE_COMMON_ELEMENTS(krb5_context);
krb5_error_code (KRB5_LIB_CALL *init)(krb5_context, void **);
void (KRB5_LIB_CALL *fini)(void *);
} krb5plugin_db_ftable; } krb5plugin_db_ftable;
#endif /* HEIMDAL_KRB5_DB_PLUGIN_H */ #endif /* HEIMDAL_KRB5_DB_PLUGIN_H */

6
lib/krb5/kuserok_plugin.h
View File

@@ -32,6 +32,8 @@
#ifndef HEIMDAL_KRB5_KUSEROK_PLUGIN_H #ifndef HEIMDAL_KRB5_KUSEROK_PLUGIN_H
#define HEIMDAL_KRB5_KUSEROK_PLUGIN_H 1 #define HEIMDAL_KRB5_KUSEROK_PLUGIN_H 1
#include <heimbase-svc.h>
#define KRB5_PLUGIN_KUSEROK "krb5_plugin_kuserok" #define KRB5_PLUGIN_KUSEROK "krb5_plugin_kuserok"
#define KRB5_PLUGIN_KUSEROK_VERSION_0 0 #define KRB5_PLUGIN_KUSEROK_VERSION_0 0
@@ -76,9 +78,7 @@
* @ingroup krb5_support * @ingroup krb5_support
*/ */
typedef struct krb5plugin_kuserok_ftable_desc { typedef struct krb5plugin_kuserok_ftable_desc {
int minor_version; HEIM_PLUGIN_FTABLE_COMMON_ELEMENTS(krb5_context);
krb5_error_code (KRB5_LIB_CALL *init)(krb5_context, void **);
void (KRB5_LIB_CALL *fini)(void *);
krb5_error_code (KRB5_LIB_CALL *kuserok)(void *, krb5_context, const char *, krb5_error_code (KRB5_LIB_CALL *kuserok)(void *, krb5_context, const char *,
unsigned int, const char *, const char *, unsigned int, const char *, const char *,
krb5_const_principal, krb5_const_principal,

6
lib/krb5/locate_plugin.h
View File

@@ -38,6 +38,8 @@
#ifndef HEIMDAL_KRB5_LOCATE_PLUGIN_H #ifndef HEIMDAL_KRB5_LOCATE_PLUGIN_H
#define HEIMDAL_KRB5_LOCATE_PLUGIN_H 1 #define HEIMDAL_KRB5_LOCATE_PLUGIN_H 1
#include <heimbase-svc.h>
#define KRB5_PLUGIN_LOCATE "service_locator" #define KRB5_PLUGIN_LOCATE "service_locator"
#define KRB5_PLUGIN_LOCATE_VERSION 1 #define KRB5_PLUGIN_LOCATE_VERSION 1
#define KRB5_PLUGIN_LOCATE_VERSION_0 0 #define KRB5_PLUGIN_LOCATE_VERSION_0 0
@@ -70,9 +72,7 @@ typedef krb5_error_code
typedef struct krb5plugin_service_locate_ftable { typedef struct krb5plugin_service_locate_ftable {
int minor_version; HEIM_PLUGIN_FTABLE_COMMON_ELEMENTS(krb5_context);
krb5_error_code (KRB5_CALLCONV *init)(krb5_context, void **);
void (KRB5_CALLCONV *fini)(void *);
krb5plugin_service_locate_lookup_old old_lookup; krb5plugin_service_locate_lookup_old old_lookup;
krb5plugin_service_locate_lookup lookup; /* version 2 */ krb5plugin_service_locate_lookup lookup; /* version 2 */
} krb5plugin_service_locate_ftable; } krb5plugin_service_locate_ftable;

5
lib/krb5/send_to_kdc_plugin.h
View File

@@ -37,6 +37,7 @@
#define HEIMDAL_KRB5_SEND_TO_KDC_PLUGIN_H 1 #define HEIMDAL_KRB5_SEND_TO_KDC_PLUGIN_H 1
#include <krb5.h> #include <krb5.h>
#include <heimbase-svc.h>
#define KRB5_PLUGIN_SEND_TO_KDC "send_to_kdc" #define KRB5_PLUGIN_SEND_TO_KDC "send_to_kdc"
@@ -61,9 +62,7 @@ typedef krb5_error_code
typedef struct krb5plugin_send_to_kdc_ftable { typedef struct krb5plugin_send_to_kdc_ftable {
int minor_version; HEIM_PLUGIN_FTABLE_COMMON_ELEMENTS(krb5_context);
krb5_error_code (KRB5_CALLCONV *init)(krb5_context, void **);
void (KRB5_CALLCONV *fini)(void *);
krb5plugin_send_to_kdc_func send_to_kdc; krb5plugin_send_to_kdc_func send_to_kdc;
krb5plugin_send_to_realm_func send_to_realm; /* added in version 2 */ krb5plugin_send_to_realm_func send_to_realm; /* added in version 2 */
} krb5plugin_send_to_kdc_ftable; } krb5plugin_send_to_kdc_ftable;