Getting single DES TGT
Sam Hartman
hartmans at MIT.EDU
Thu Apr 7 18:45:13 EDT 2005
>>>>> "Tim" == Tim Alsop <Tim.Alsop at CyberSafe.Ltd.UK> writes:
Tim> It looks like you have noticed that the Oracle ASO 'Kerberos'
Tim> adapter includes Kerberos code based on an old release of MIT
Tim> libraries. However, the 'CyberSafe' adapter included in ASO
Tim> uses GSS-API, which means the GSS-API/Kerberos library can be
Tim> updated to support new ciphers when available without
Tim> effecting the Oracle software deployment - a much better
Tim> architecture, I am sure you will agree ?
I'll certainly agree that using a modern Kerberos implementation is a
good thing. I don't see how using GSS vs Kerberos has anything to do
with the ease of updating the library.
More information about the Kerberos
mailing list