On Wed, Sep 14, 2016 at 10:07:15PM -0400, Garrett Wollman wrote: > <<On Wed, 14 Sep 2016 15:21:46 -0400 (EDT), Benjamin Kaduk <ka...@mit.edu> > said: > > > Well, it's definitely too late for 11, now. > > > But, Debian is preparing to remove their heimdal package entirely, > > imminently: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=837728 > > The primary issue, so far as I can see, is that Heimdal and MIT were > only compatible in the parts of the API that were formally > standardized. For those of us who need MIT (to have a working kadmin, > for example), that has pretty much always boiled down to completely > disabling Heimdal in base (and anything that depends on it, like > OpenSSH, pam_krb5, and GSSAPI-authenticated NFS), and installing > replacement bits from ports/packages. > > If we're going to remove Heimdal from base, we should completely > deorbit (or disable, as appropriate) all of the things that depend on > it, and make sure that there are ports that provide replacement > functionality. (AFAIK the only thing missing is gssd, the user-mode > side of the authenticated NFS support.) My bet would be that very few > FreeBSD users actually take advantage of this support, and unless > they're running in an all-FreeBSD or all-Heimdal shop probably have to > install MIT Kerberos anyway.
I am use gssd. For $HOME over NFS. _______________________________________________ freebsd-current@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-current To unsubscribe, send any mail to "freebsd-current-unsubscr...@freebsd.org"
