On 28 Jun 2017, at 17:48, Jeffrey Altman <jalt...@secure-endpoints.com> wrote: > > On 6/28/2017 1:17 AM, Russ Allbery wrote: >> Nico Williams <n...@cryptonector.com> writes: >> >>> We do need better key mgmt support though. It'd nice to have automatic >>> rekeying and expunging of keys too old to be needed for decrypting >>> extant live tickets. >> >> Yes, please, or I will inflict my hideous shell script on you that does >> this (using wallet). > > I would be interested in hearing from the participants of this list > whether or not it would be appropriate to ship some of the Secure > Endpoints open source kerberos tooling as part of Heimdal: > > http://oskt.secure-endpoints.com/ > > In particular, Roland's krb5_admin, krb5_keytab, and the C variant of KNC.
I’d like to see k5ping added to that list too :) (http://oskt.secure-endpoints.com/k5ping.html) /P