MIT Kerberos and Solaris 10 Kerberos

[Tom Yu]

>>>>> "Wyllys" == Wyllys Ingersoll <wyllys.ingersoll at sun.com> writes:

Wyllys> That's because Solaris 10 'kadmin' uses RPCSEC_GSS and
Wyllys> MIT uses a slightly different RPC protocol.

[...]

Wyllys> There have been patches submitted to the MIT codebase to make
Wyllys> it able to support RPCSEC_GSS (and thus interop with Solaris kadmin),
Wyllys> but Im not sure if those are in the latest release or not.

RPCSEC_GSS support will be present in krb5-1.4 (currently in beta).  I
have done a brief successful interop test against SEAM's kadmin
protocol.  Independent confirmation would be useful.

---Tom