cvs commit: src/release Makefile src/release/scripts crypto-install.sh

Jeroen C. van Gelderen jeroen at vangelderen.org
Wed Apr 30 12:32:04 PDT 2003


On Wednesday, Apr 30, 2003, at 21:17 Europe/Amsterdam, Garrett Wollman 
wrote:

> <<On Wed, 30 Apr 2003 11:16:03 -0700, Kris Kennaway 
> <kris at obsecurity.org> said:
>
>> Hmm, is it really a good idea to combine crypto and krb5?  krb5 is, I
>> suspect, a rarely-used feature in the wild.
>
> ``The wild'' contains lots and lots of Windows Active Directory
> implementations.
>
> For any operation larger than a few dozen hosts, Kerberos is a great
> deal easier to manage than n^2 SSH key combinations.

Where does the number n^2 come from?

-J

>   (This presumes
> that you have a working version of Kerberized SSH, which at present
> means OpenSSH 3.4 with the patches.)  Even for relatively small
> installations, the convenience factor can be significant, particularly
> when integrated with other operating systems infrastructure.
>
> -GAWollman
>
> _______________________________________________
> cvs-all at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/cvs-all
> To unsubscribe, send any mail to "cvs-all-unsubscribe at freebsd.org"
>
-- 
Jeroen C. van Gelderen - jeroen at vangelderen.org

Hatred, n.:
   A sentiment appropriate to the occasion of another's superiority.
   -- Ambrose Bierce, "The Devil's Dictionary"



More information about the cvs-src mailing list