Net Identity Manager: Identity

Sensei senseiwa at mac.com
Fri Jul 7 12:54:02 EDT 2006


On 2006-07-06 23:44:22 +0200, Jeffrey Altman <jaltman2 at nyc.rr.com> said:

> There is are several serious known bugs in KFW 3.0 that prevent me
> from recommending its use.  These bugs are fixed in the source
> repository and will be included in KFW 3.1.
> 
> (1) If the user's locale is not "en_US" then the Kerberos 5 Identity
>     module cannot be loaded.
> 
> (2) If the user's principal name includes numeric characters it is
>     treated as an invalid principal and ticket getting is disabled.
> 
> (3) There is a memory leak during credential renewal.
> 
> Until such time as KFW 3.1 is available.  I suggest that end user's
> stick to KFW 2.6.5.
> 
> I keep a recent alpha build of pre-KFW 3.1 with the fixes in
> 
>   http://web.mit.edu/jaltman/Public/KFW/kfw-3.1-alpha/
>   /afs/athena.mit.edu/user/j/a/jaltman/Public/KFW/kfw-3.1-alpha/
> 
> along with a matching NetIDMgr AFS plugin.  Feel free to evaluate
> the code to ensure it works in your environment but please do not
> distribute it to end users.

Thanks Jeffrey. I will test the new 3.1 alpha, and 2.6 as you suggested 
for ``production''.

-- 
Sensei <senseiwa at mac.com>

The optimist thinks this is the best of all possible worlds.
The pessimist fears it is true.      [J. Robert Oppenheimer]




More information about the Kerberos mailing list