On Mon, Feb 10, 2025 at 09:59:26AM -0800, Russ Allbery wrote: > As someone who used to have to regularly deal with multi-implementation > Kerberos setups, I can confirm that there is a real need to be able to > install the Heimdal clients and the MIT clients (including kadmin) at the > same time. This is something that people have been asking for constantly > for over a decade and it would be great to accomplish it.
Yes, on clients that's fine, and it should work (with all the caveats you mentioned). But the bug is about KDC packaging scripts failing if kadmin from the other implementation is installed. > I don't think anyone wants to mix implementations on the KDC itself. Exactly - that's why making the KDC package Conflicts: with the other implementation would be a quick fix. There aren't many KDC implementations, and I think Shishi does not use kadmin (I'm not sure, I never used it), so maintaining such Conflicts: does not sound like a big burden. Regards, Gabor
