Kerberos for Macintosh 4.0 Released

Marshall Vale mjv at MIT.EDU
Fri Feb 22 15:46:00 EST 2002

The MIT MacDev team is pleased to announce the availability of 
Kerberos for Macintosh 4.0, final release. This release is available 
from the MIT Kerberos site:

<>  Follow the "Getting Kerberos from MIT" link.

All feedback and bug reports for Kerberos for Macintosh 4.0 should be 
sent to <mailto:krbdev at>

Kerberos for Macintosh 4.0 expands and improves native support for 
Mac OS X as well as including the new UI elements for Mac OS 9 
introduced in KfM 3.5.

Kerberos for Macintosh 4.0 requires a Power Macintosh with Mac OS X 
10.1.2 or later for the Mac OS X version, or Mac OS 8.1 or later for 
the Mac OS 8 & 9 version.

This is a final release, and does not expire.

Changes since Kerberos For Macintosh 4.0fc1
* Mac OS X: Fixed UID security hole where other users could see your 
tickets if they SSH into your Macintosh.
* Mac OS X: Fixed memory leak in
* Mac OS X: Removed nonfunctional help button from Kerberos Login dialog
* Mac OS X: Installer now enforces Mac OS X 10.1.2 minimum requirement
* Mac OS X/9: Kerberos Login dialog now returns correct error messages again.
* Mac OS X/9: Classic ticket sharing is disabled when KfM is 
installed only on the Classic system and not OS X.
* Mac OS X/9: Classic ticket sharing is disabled when the versions of 
KfM on OS X and the Classic system do not match.
* Mac OS X/9: Fixed various bugs in Classic ticket sharing AE handling
* Mac OS X/9: Kerberos Menu 'Open Kerberos Control Panel' item now 
enabled under Classic
* Mac OS 8: Now works under Mac OS 8.1 again.

If you built an application that linked against the /usr/lib dylibs 
in KfM 4.0b2 or earlier, or the ones included with Mac OS X 10.1, you 
will need to re-link your application to work with the KfM 4.0 dylibs.

Ticket Sharing Between Mac OS X and Classic
In order for Kerberos tickets to be shared between Mac OS X and 
Classic, the same version of KfM 4.0 must be installed on both the OS 
X and Classic systems.  When updating from a previous release, you 
should install the Classic KfM first, then the OS X KfM to prevent 
possible conflicts.

When an application running under Classic needs to display the 
Kerberos Login dialog, the Mac OS X dialog will appear.

The Mac OS 9 version of KfM 4.0 detects whether it is running under 
Mac OS X/Classic or regular Mac OS 9.x and automatically enables 
support for ticket sharing when possible.

Distribution Info
At this point in time, this release is available as a single package 
which includes both installers and SDKs. The installers install 
binaries for people to use with their applications in their 
environments. The SDKs are for application and library programmers to 
add Kerberos functionality to their code or update to newer versions 
of the various Kerberos APIs.

We will be releasing separate binaries and installer sources at a later date.

"One chapter closes, another opens."

Marshall Vale    | mjv at | Information Systems
MacDev Control Panel | Massachusetts Institute of Technology

More information about the krbdev mailing list