kerberos binary compatiblity

[Nebergall, Christopher]

I've been tracking a bug on Mozilla about there recent support of kerberos
for web authentication but it may at some point also be used for
authentication to mail servers.  The Mozilla releases are compiled on a
stock RH 7 box and the negotiateauth extensions is linked dynamically
against its (really old) version of MIT Kerberos (1.2.4???).  Users on newer
OS's such as Fedora Core 1 and 2 have been complaining that the extension
fails to load on their machines because libcom_err.so.3 is not found only
libcom_err.so.2. From comments in the bug it appears that that problem has
something to do with the libcom_err from e2fsprogs being used instead.  What
version of MIT kerberos should be used for greatest binary compatibility? If
possible, I'm also interested in keeping binary compatibility with the
latest MIT version as not to discourage users from upgrading.  

http://bugzilla.mozilla.org/show_bug.cgi?id=242029
<http://bugzilla.mozilla.org/show_bug.cgi?id=242029> 

Thanks,
Christopher

--------------------------------------
Christopher Nebergall
cneberg at sandia.gov <mailto:cneberg at sandia.gov> 
Sandia National Laboratories
System Security Research and Integration
505-284-8408