From owner-freebsd-security@FreeBSD.ORG  Mon Dec  1 21:20:20 2003
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id D140316A4CE; Mon,  1 Dec 2003 21:20:20 -0800 (PST)
Received: from mandy.mts.ru (mandy.mts.ru [81.211.47.3])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id 9099543FDD; Mon,  1 Dec 2003 21:20:16 -0800 (PST)
	(envelope-from tiamat@komi.mts.ru)
Received: from maeko.inside.mts.ru (maeko [192.168.10.3])
        by mandy.mts.ru  with SMTP id hB25KAb07459;
        Tue, 2 Dec 2003 08:20:15 +0300 (MSK)
Received: from stella.komi.mts.ru ([10.50.1.1])
 by maeko.inside.mts.ru (NAVGW 2.5.2.12) with SMTP id M2003120208200907543
 ; Tue, 02 Dec 2003 08:20:10 +0300
Received: from nbdav (nb-dav.komi.mts.ru [10.50.1.185])
	(user=tiamat mech=NTLM bits=0)
	by stella.komi.mts.ru (MTS Komi/Smtp) with ESMTP id hB25K9Fm089235;
	Tue, 2 Dec 2003 08:20:09 +0300 (MSK)
	(envelope-from tiamat@komi.mts.ru)
Message-ID: <007101c3b893$f04e9150$b901320a@komi.mts.ru>
From: "?????? ????????? ??????????" <tiamat@komi.mts.ru>
To: "Jacques A. Vidrine" <nectar@FreeBSD.org>
References: <02be01c3b5a6$a78a8ea0$b901320a@komi.mts.ru>
	<200312010859.hB18x2Dw094198@grimreaper.grondar.org>
	<20031201180202.GD244@madman.celabo.org>
Date: Tue, 2 Dec 2003 08:20:02 +0300
Organization: =?iso-8859-1?B?1Ojr6ODrIM7AziAizO7h6Ov87fvlINLl6+XR6PHy5ez7IiDiIOM=?=
	=?iso-8859-1?B?LtH76vL74urg8OUsINDKLg==?=
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1158
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
cc: freebsd-security@FreeBSD.org
Subject: Re: Kerberized applications in FreeBSD 5.x
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security issues [members-only posting]
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 02 Dec 2003 05:20:20 -0000

> > You need to turn it obn by hand in /etc/pam.d/*. Its not on by default,
> > because that would cause nasty delays in PAM.
> 
> I think he meant *actual* Kerberos support i.e. at the protocol level,
> not just password-authentication-via-Kerberos.

Yes of course!

Thanks!