Brett Lymn wrote:

Oddly this non-standard AD seems to interoperate with the Solaris ldap
client, an openldap client and with MIT kerberos just fine.

Seems to, or actually does? Or can be be pounded in after agreeing to non-Open licenses?

Point me to some more recent articles or documentation (without NDA requirements) which counter the following:

http://www.ddj.com/184404225
http://www.infoworld.com/articles/op/xml/00/05/15/000515oplivingston.html
http://www.networkworld.com/news/2000/0511kerberos.html
http://archive.salon.com/tech/log/2000/05/11/slashdot_censor/
http://technews.acm.org/articles/2000-2/0405w.html#item14
http://features.slashdot.org/article.pl?sid=00/05/11/0153247&mode=nested&threshold=3

In short, there seems to have been no announcement that the problem is resolved. That's a strange silence for a marketing company.

I'm not arguing that the Squid patch does not work, nor that it is not possible for some systems vendors to have signed agreements to get at the proprietary information. Nor will I say that there is no *short term* advantage.

What I am saying is that without careful planning, injudicious use of the patch leads to further entrenchment of an unsound service and the unsound system in which it is embedded rather than as a transition to a more stable, secure and maintainable infrastructure.

-Lars

Reply via email to