Re: Our aging base system krb5 [heimdal]

2010-06-07 Thread David E. Thiel
On Sun, Jun 06, 2010 at 08:15:33PM +, b. f. wrote: > What incompatibilities exist between that latest versions of the MIT > Kerberos and Heimdal implementations? How does des@ feel about it, > since libpam and openssh may have to be altered? My experience is a few years old, but last time I tr

Re: Our aging base system heimdal

2010-06-07 Thread Jos Backus
On Mon, Jun 07, 2010 at 03:15:27PM +0100, Doug Rabson wrote: > On 6 June 2010 21:09, Jos Backus wrote: > > > Any chance the kadmin protocol will ever be standardized? > > > > > My understanding is that the MIT kadmin protocol is based GSS-API > authenticated RPC which FreeBSD didn't support until

Re: Our aging base system heimdal

2010-06-07 Thread Doug Rabson
On 6 June 2010 21:09, Jos Backus wrote: > Any chance the kadmin protocol will ever be standardized? > > My understanding is that the MIT kadmin protocol is based GSS-API authenticated RPC which FreeBSD didn't support until recently. I added working RPCSEC_GSS to our userland RPC library in 2008 a