From owner-cvs-all@FreeBSD.ORG  Wed Apr 30 12:32:04 2003
Return-Path: <owner-cvs-all@FreeBSD.ORG>
Delivered-To: cvs-all@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id 0C18837B401; Wed, 30 Apr 2003 12:32:04 -0700 (PDT)
Received: from possum.cryptohill.net (cambist.cryptohill.net [24.244.145.35])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id 3939B43F85; Wed, 30 Apr 2003 12:32:03 -0700 (PDT)
	(envelope-from jeroen@vangelderen.org)
Received: from vangelderen.org (catv7146.extern.kun.nl [131.174.117.146])
	by possum.cryptohill.net (Postfix) with ESMTP
	id 11743AE004; Wed, 30 Apr 2003 15:31:58 -0400 (EDT)
Date: Wed, 30 Apr 2003 21:31:56 +0200
Content-Type: text/plain; charset=US-ASCII; format=flowed
Mime-Version: 1.0 (Apple Message framework v552)
To: Garrett Wollman <wollman@lcs.mit.edu>
From: "Jeroen C. van Gelderen" <jeroen@vangelderen.org>
In-Reply-To: <200304301917.h3UJH4Yj054706@khavrinen.lcs.mit.edu>
Message-Id: <67613AC6-7B42-11D7-B4E5-000393754B1C@vangelderen.org>
Content-Transfer-Encoding: 7bit
X-Mailer: Apple Mail (2.552)
cc: cvs-src@FreeBSD.org
cc: src-committers@FreeBSD.org
cc: cvs-all@FreeBSD.org
cc: Kris Kennaway <kris@obsecurity.org>
Subject: Re: cvs commit: src/release Makefile src/release/scripts
	crypto-install.sh
X-BeenThere: cvs-all@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: CVS commit messages for the entire tree <cvs-all.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-all>
List-Post: <mailto:cvs-all@freebsd.org>
List-Help: <mailto:cvs-all-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 30 Apr 2003 19:32:04 -0000


On Wednesday, Apr 30, 2003, at 21:17 Europe/Amsterdam, Garrett Wollman 
wrote:

> <<On Wed, 30 Apr 2003 11:16:03 -0700, Kris Kennaway 
> <kris@obsecurity.org> said:
>
>> Hmm, is it really a good idea to combine crypto and krb5?  krb5 is, I
>> suspect, a rarely-used feature in the wild.
>
> ``The wild'' contains lots and lots of Windows Active Directory
> implementations.
>
> For any operation larger than a few dozen hosts, Kerberos is a great
> deal easier to manage than n^2 SSH key combinations.

Where does the number n^2 come from?

-J

>   (This presumes
> that you have a working version of Kerberized SSH, which at present
> means OpenSSH 3.4 with the patches.)  Even for relatively small
> installations, the convenience factor can be significant, particularly
> when integrated with other operating systems infrastructure.
>
> -GAWollman
>
> _______________________________________________
> cvs-all@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/cvs-all
> To unsubscribe, send any mail to "cvs-all-unsubscribe@freebsd.org"
>
-- 
Jeroen C. van Gelderen - jeroen@vangelderen.org

Hatred, n.:
   A sentiment appropriate to the occasion of another's superiority.
   -- Ambrose Bierce, "The Devil's Dictionary"