From owner-freebsd-security  Thu Dec  3 15:49:38 1998
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id PAA13939
          for freebsd-security-outgoing; Thu, 3 Dec 1998 15:49:38 -0800 (PST)
          (envelope-from owner-freebsd-security@FreeBSD.ORG)
Received: from burka.rdy.com (burka.rdy.com [205.149.163.30])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id PAA13934
          for <security@FreeBSD.ORG>; Thu, 3 Dec 1998 15:49:36 -0800 (PST)
          (envelope-from dima@burka.rdy.com)
Received: (from dima@localhost)
	by burka.rdy.com (8.9.1/RDY&DVV) id PAA07878;
	Thu, 3 Dec 1998 15:49:09 -0800 (PST)
Message-Id: <199812032349.PAA07878@burka.rdy.com>
Subject: Re: mail.local
In-Reply-To: <Pine.BSF.3.96.981203172323.14719A-100000@fledge.watson.org> from Robert Watson at "Dec 3, 1998  5:27:46 pm"
To: robert+freebsd@cyrus.watson.org
Date: Thu, 3 Dec 1998 15:49:08 -0800 (PST)
Cc: dima@best.net, lyndon@execmail.com, woodford@cc181716-a.hwrd1.md.home.com,
        security@FreeBSD.ORG
X-Class: Fast
Organization: HackerDome
Reply-To: dima@best.net
From: dima@best.net (Dima Ruban)
X-Mailer: ELM [version 2.4ME+ PL43 (25)]
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

Robert Watson writes:
> > If you use kerberos, I'd really suggest you on moving to K5.
> > Much nicer and much more flexible in administration.
> 
> I would certainly like to move to K5, but that's not an insignificant
> amount of trouble in terms of transitioning.  Speaking of KerberosV, is
> it likely that FreeBSD will shift to shipping K4 instead of K5 by default
> at some point?  K4 is the most common in all the environments I regularly

You mean from K4 to K5 by default?

Yes, hopefully. Me and markm are still working on it.

> use (here at CMU anyway) but K5 certainly has advantages (including, I
> believe, better support for multihomed hosts in the form of not using the
> IP in tickets/authenticators?)
> 
> I would guess that the transition would be easier now that we have PAM?

I don't know much about PAM stuff

> 
>   Robert N Watson 
> 
> robert@fledge.watson.org              http://www.watson.org/~robert/
> PGP key fingerprint: 03 01 DD 8E 15 67 48 73  25 6D 10 FC EC 68 C1 1C
> 
> Carnegie Mellon University            http://www.cmu.edu/
> TIS Labs at Network Associates, Inc.  http://www.tis.com/
> SafePort Network Services             http://www.safeport.com/
> 

-- dima

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message