Getting single DES TGT

Sam Hartman hartmans at MIT.EDU
Thu Apr 7 18:45:13 EDT 2005


>>>>> "Tim" == Tim Alsop <Tim.Alsop at CyberSafe.Ltd.UK> writes:

    Tim> It looks like you have noticed that the Oracle ASO 'Kerberos'
    Tim> adapter includes Kerberos code based on an old release of MIT
    Tim> libraries.  However, the 'CyberSafe' adapter included in ASO
    Tim> uses GSS-API, which means the GSS-API/Kerberos library can be
    Tim> updated to support new ciphers when available without
    Tim> effecting the Oracle software deployment - a much better
    Tim> architecture, I am sure you will agree ?

I'll certainly agree that using a modern Kerberos implementation is a
good thing.  I don't see how using GSS vs Kerberos has anything to do
with the ease of updating the library.


More information about the Kerberos mailing list