From owner-freebsd-arch Fri Feb 16 12:25: 7 2001 Delivered-To: freebsd-arch@freebsd.org Received: from point.osg.gov.bc.ca (point.osg.gov.bc.ca [142.32.102.44]) by hub.freebsd.org (Postfix) with ESMTP id 95F0937B491 for ; Fri, 16 Feb 2001 12:25:03 -0800 (PST) Received: (from daemon@localhost) by point.osg.gov.bc.ca (8.8.7/8.8.8) id MAA03704; Fri, 16 Feb 2001 12:24:24 -0800 Received: from passer.osg.gov.bc.ca(142.32.110.29) via SMTP by point.osg.gov.bc.ca, id smtpda03702; Fri Feb 16 12:24:22 2001 Received: (from uucp@localhost) by passer.osg.gov.bc.ca (8.11.2/8.9.1) id f1GKOHD76219; Fri, 16 Feb 2001 12:24:17 -0800 (PST) Received: from cwsys9.cwsent.com(10.2.2.1), claiming to be "cwsys.cwsent.com" via SMTP by passer9.cwsent.com, id smtpdF76215; Fri Feb 16 12:23:41 2001 Received: (from uucp@localhost) by cwsys.cwsent.com (8.11.2/8.9.1) id f1GKNeI30263; Fri, 16 Feb 2001 12:23:40 -0800 (PST) Message-Id: <200102162023.f1GKNeI30263@cwsys.cwsent.com> Received: from localhost.cwsent.com(127.0.0.1), claiming to be "cwsys" via SMTP by localhost.cwsent.com, id smtpdx30259; Fri Feb 16 12:22:59 2001 X-Mailer: exmh version 2.3.1 01/18/2001 with nmh-1.0.4 Reply-To: Cy Schubert - ITSD Open Systems Group From: Cy Schubert - ITSD Open Systems Group X-Sender: schubert To: Terry Lambert Cc: Cy.Schubert@uumail.gov.bc.ca, will@physics.purdue.edu (Will Andrews), arch@FreeBSD.ORG Subject: Re: Wish List (was: Re: The /usr/bin/games bikeshed again) In-reply-to: Your message of "Fri, 16 Feb 2001 20:07:39 GMT." <200102162007.NAA07191@usr05.primenet.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Fri, 16 Feb 2001 12:22:59 -0800 Sender: owner-freebsd-arch@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG In message <200102162007.NAA07191@usr05.primenet.com>, Terry Lambert writes: > > The downside to Kerberos V is, I've yet to find a good Kerberos V > > client for Windows. > > The Cyrus project has a Kerberos V DLL that it uses for IMAP4 > client code. I think there are references to it on the Cyrus > project page, as well as the University of Washington C-client > page. Thanks. I'll take a look. > > I've always had too many people insisting that the realm not > equal the delegated subdomain to be willing to deploy it on > any network where I had a say, or was expected to provide > authentication base synchronization code between one system > and another (if delegation != realm, the problems in doing > this become both obvious and 12 headed monsters). I don't have experience with delegation != realm yet, though I will be embarking on this course shortly, not by my own doing. I'm not looking forward to this project. So far I think the only gotcha is that krb5.conf on every host will have to explicitly identify which hosts are in which realm. Regards, Phone: (250)387-8437 Cy Schubert Fax: (250)387-5766 Team Leader, Sun/Alpha Team Internet: Cy.Schubert@osg.gov.bc.ca Open Systems Group, ITSD, ISTA Province of BC To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-arch" in the body of the message