Douglas Knudsen wrote:
>
> Are you all M$? IIRC, M$ screwed with Kerberos to some extent that
> caused some compat issues with the standard. I'm no expert here, very
> far from it, but I've read this from several Unix/Linux experts.
> YMMV.
No, we are MS, OpenBSD, FreeBSD, Debian and some Solaris too.
AFAIK MS didn't exactly screw Kerberos up, it is merely that they had to
get Win2K out of the door so for a certain encryption function they used
the description from revision 9 of the Kerberos 5 draft. Further, they
added some propietary code to use Kerberos keys from Smartcards, but
that is not exactly an incompatibility, and the RFC specifically allows
for it.
Getting Win2K to Kerberos appears to be a breeze so far, but the
interfacing with OpenBSD gives trouble (Kerberos 5 is not yet in the
stable branch of OpenBSD yet), but we want it because we want to run the
KDC on OpenBSD. If WinXP runs with a Kerberos 5 implementation that is
fully standards compliant we might just move to WinXP.
Jochem
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Structure your ColdFusion code with Fusebox. Get the official book at
http://www.fusionauthority.com/bkinfo.cfm
------------------------------------------------------------------------------
To unsubscribe, send a message to [EMAIL PROTECTED] with
'unsubscribe' in the body or visit the list page at www.houseoffusion.com
