From owner-cvs-all@FreeBSD.ORG  Wed Apr 30 18:53:20 2003
Return-Path: <owner-cvs-all@FreeBSD.ORG>
Delivered-To: cvs-all@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id 49D1837B401; Wed, 30 Apr 2003 18:53:20 -0700 (PDT)
Received: from khavrinen.lcs.mit.edu (khavrinen.lcs.mit.edu [18.24.4.193])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id 1A47643FCB; Wed, 30 Apr 2003 18:53:19 -0700 (PDT)
	(envelope-from wollman@khavrinen.lcs.mit.edu)
Received: from khavrinen.lcs.mit.edu (localhost [IPv6:::1])
	by khavrinen.lcs.mit.edu (8.12.9/8.12.9) with ESMTP id h411rHVo057573
	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK);
	Wed, 30 Apr 2003 21:53:17 -0400 (EDT)
	(envelope-from wollman@khavrinen.lcs.mit.edu)
Received: (from wollman@localhost)
	by khavrinen.lcs.mit.edu (8.12.9/8.12.9/Submit) id h411rGdE057570;
	Wed, 30 Apr 2003 21:53:16 -0400 (EDT)
	(envelope-from wollman)
Date: Wed, 30 Apr 2003 21:53:16 -0400 (EDT)
From: Garrett Wollman <wollman@lcs.mit.edu>
Message-Id: <200305010153.h411rGdE057570@khavrinen.lcs.mit.edu>
To: Gordon Tetlow <gordont@gnf.org>
In-Reply-To: <20030501003606.GD14221@roark.gnf.org>
References: <200304301754.h3UHsJ21004574@repoman.freebsd.org>
	<20030430222849.GC14221@roark.gnf.org>
	<20030430202449.GA23953@sunbay.com>
	<20030430194402.GB84924@rot13.obsecurity.org>
	<200304301952.h3UJqiQL016860@grimreaper.grondar.org>
	<20030430200008.GA85160@rot13.obsecurity.org>
	<20030430181603.GD84302@rot13.obsecurity.org>
	<20030501002206.GA30097@madman.celabo.org>
	<20030501003606.GD14221@roark.gnf.org>
X-Spam-Score: -19.8 ()
	IN_REP_TO,QUOTED_EMAIL_TEXT,REFERENCES,REPLY_WITH_QUOTES
X-Scanned-By: MIMEDefang 2.33 (www . roaringpenguin . com / mimedefang)
cc: cvs-src@FreeBSD.org
cc: src-committers@FreeBSD.org
cc: cvs-all@FreeBSD.org
Subject: Re: Kerberos 5 (was Re: cvs commit: src/release ...)
X-BeenThere: cvs-all@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: CVS commit messages for the entire tree <cvs-all.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-all>
List-Post: <mailto:cvs-all@freebsd.org>
List-Help: <mailto:cvs-all-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 01 May 2003 01:53:20 -0000

<<On Wed, 30 Apr 2003 17:36:07 -0700, Gordon Tetlow <gordont@gnf.org> said:

> suppose that makes me for the change. Either that or dropping krb5
> out of the system completely. But as there are pretty significant
> integration benefits (openssh, telnet, etc) I think we should keep
> it.

I'm of two minds about this.  I would like to see good integration
between Kerberos and base-system utilities, but we run MIT Kerberos,
not Heimdal, and such integration makes life enormously more
difficult.  Right now it's not much of an issue because we can build
everything that depends on Kerberos from ports, which saves a great
deal of version-skew hassle, but I can see further integration causing
problems for us.  I wouldn't want to have to use a port for OpenSSL,
for example, and thereby lose all of the value that we get from having
it integrated nicely with the operating system.

-GAWollman