Kerberos 5 (was Re: cvs commit: src/release ...)

Garrett Wollman wollman at lcs.mit.edu
Wed Apr 30 18:53:20 PDT 2003


<<On Wed, 30 Apr 2003 17:36:07 -0700, Gordon Tetlow <gordont at gnf.org> said:

> suppose that makes me for the change. Either that or dropping krb5
> out of the system completely. But as there are pretty significant
> integration benefits (openssh, telnet, etc) I think we should keep
> it.

I'm of two minds about this.  I would like to see good integration
between Kerberos and base-system utilities, but we run MIT Kerberos,
not Heimdal, and such integration makes life enormously more
difficult.  Right now it's not much of an issue because we can build
everything that depends on Kerberos from ports, which saves a great
deal of version-skew hassle, but I can see further integration causing
problems for us.  I wouldn't want to have to use a port for OpenSSL,
for example, and thereby lose all of the value that we get from having
it integrated nicely with the operating system.

-GAWollman



More information about the cvs-src mailing list