Re: removing MK_GSSAPI

On Mon, Aug 11, 2025 at 9:33 AM Lexi Winter <ivy@freebsd.org> wrote:
>
> Rick Macklem:
> > Once upon a time, GSSAPI was envisioned to someday have a variety of
> > mechanisms, with Kerberos being one possible one. That has never
> > happened
>
> i believe Heimdal does provide an NTLM mechanism (libgssapi_ntlm) and
> also an SPNEGO mechanism which can presumably use either Kerberos or
> NTLM, but as Heimdal is planned to be removed anyway, i'm not sure this
> is a reason to keep the knob around just in case someone decides to add
> those back later.
Ok, I didn't know about NTLM (I did know that SPNEGO layered on top
of Kerberos). I doubt we care about a Microsoft protocol and, as you say,
it could be changed back someday, if need be.

rick