On Thu, Jul 30, 2009 at 12:15:51AM -0600, Shawn Emery wrote: > William Yang wrote: > > Out of curiosity...what benefits does Solaris pam_krb5 have over Russ > > Allbery's pam_krb5 (http://www.eyrie.org/~eagle/software/pam-krb5/)? The > > latter is commonly shipped with Linux distributions and contains a few > > features not present in the Solaris one, such as realm, minimum_uid, etc. > > > > One advantage is that it is supported by Sun. If there is missing > functionality that you require please file an RFE so that we can start > tracking demand and start building business justification for said feature.
In addition, Solaris pam_krb5 uses the Solaris native libkrb5 which leverages various Solaris technologies including the Crypto Framework which provides enhanced crypto support both in user and kernel space. This enhanced crypto support translates into Solaris Kerberos transparently using highly optimized crypto provider modules or hardware crypto providers if available. Note that Sun continues to enhance pam_krb5 and, as Shawn suggests, people are welcome to file enhancement requests at http://www.opensolaris.org/bug/report.jspa and are also welcome to work on developing these enhancements within the OpenSolaris development guidelines which are described on the site. -- Will Fiveash Sun Microsystems Inc. http://opensolaris.org/os/project/kerberos/ Sent from mutt, a sweet ASCII MUA
