> Why is MIT Kerberos not readily exportable?
The following is my personal observation; I can't speak for MIT.
MIT is being very cautious, perhaps overly so, about making krb5
available to foreigners. (The relevant technical people don't want to
act until they consult with MIT lawyers, who are... not speedy.)
However, the MIT krb5 license does not prohibit export from the US as
long as it is done according to US law. (See the exact text of the
license for details.) So if you are sure that krb5 is exportable, go
for it.
I have no information as to whether the krb5 support in ssh 2.3.0 was
written for heimdal or MIT krb5. I believe the APIs for the two are
very similar, but that there are a few features found in one and not
in the other, and I also believe the names of the libraries you need
to link against are not the same.