Net Identity Manager: Identity
Sensei
senseiwa at mac.com
Fri Jul 7 12:54:02 EDT 2006
On 2006-07-06 23:44:22 +0200, Jeffrey Altman <jaltman2 at nyc.rr.com> said:
> There is are several serious known bugs in KFW 3.0 that prevent me
> from recommending its use. These bugs are fixed in the source
> repository and will be included in KFW 3.1.
>
> (1) If the user's locale is not "en_US" then the Kerberos 5 Identity
> module cannot be loaded.
>
> (2) If the user's principal name includes numeric characters it is
> treated as an invalid principal and ticket getting is disabled.
>
> (3) There is a memory leak during credential renewal.
>
> Until such time as KFW 3.1 is available. I suggest that end user's
> stick to KFW 2.6.5.
>
> I keep a recent alpha build of pre-KFW 3.1 with the fixes in
>
> http://web.mit.edu/jaltman/Public/KFW/kfw-3.1-alpha/
> /afs/athena.mit.edu/user/j/a/jaltman/Public/KFW/kfw-3.1-alpha/
>
> along with a matching NetIDMgr AFS plugin. Feel free to evaluate
> the code to ensure it works in your environment but please do not
> distribute it to end users.
Thanks Jeffrey. I will test the new 3.1 alpha, and 2.6 as you suggested
for ``production''.
--
Sensei <senseiwa at mac.com>
The optimist thinks this is the best of all possible worlds.
The pessimist fears it is true. [J. Robert Oppenheimer]
More information about the Kerberos
mailing list