Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 9 Apr 2001 20:35:40 +0000 (GMT)
From:      Terry Lambert <tlambert@primenet.com>
To:        brett@lariat.org (Brett Glass)
Cc:        mwm@mired.org (Mike Meyer), dchulhan@uwi.tt (Dale Chulhan - Home), chat@FreeBSD.ORG (chat@FreeBSD.ORG), TheTechies@onelist.com (My List), mbug@listbot.com (The Trinidad and Tobago Microsoft BackOffice Users Group)
Subject:   Re: Win NT vs UNIX ( cross fire )
Message-ID:  <200104092035.NAA28894@usr08.primenet.com>
In-Reply-To: <4.3.2.7.2.20010407152644.0455d9b0@localhost> from "Brett Glass" at Apr 07, 2001 03:28:45 PM

next in thread | previous in thread | raw e-mail | index | archive | help
> Actually, it's a great reason NOT to use the GPL. I'd hate to see what
> sort of abomination Windows users would be stuck with if Microsoft
> had not been able to adopt Kerberos. Microsoft's relatively minor
> change to Kerberos -- similar to the minor one they made to PPP/CHAP --
> was quickly accommodated by the industry and caused no major problems
> (just annoyance).

That's actually incorrect.

Microsoft uses a reserved field for a Microsoft-specific "cookie"
that mapped into the Windows NT credential space.

The author of Kerberos has come out and stated that they are
using that field in a way it was not intended to be used.

It is possible for your Kerberos client machines to use a
Windows box as a Kerberos server.

It is _not_ possible, however, to use a UNIX box as a Kerberos
server for Windows machines, without losing some functionality.

Because they don't document how they use the field internally,
it's also not possible to participate as a doamin controller
in a Windows 2000 domain, unless you are a Windows box.

Effectively, this gives them control of the server market, if
you need Windows 2000 desktops to operate properly.

You really ought to talk to Jeremy Allison, the current SAMBA
maintainer, about this issue.


					Terry Lambert
					terry@lambert.org
---
Any opinions in this posting are my own and not those of my present
or previous employers.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-chat" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200104092035.NAA28894>