Porting Heimdal's libkafs to MIT Kerberos

Steven Michaud smichaud at pobox.com
Fri Jan 9 12:17:58 EST 2004


Is MIT interested in porting Heimdal's libkafs to MIT Kerberos 5, or
in incorporating someone else's port (if one gets written) into the
standard distribution(s)?

The reason I ask is that people at OpenSSH are adding support for
Heimdal's libkafs, and wonder if it's appropriate to make their
"configure" script test unconditionally (on either Heimdal or MIT
Kerberos) for libkafs (on the chance that someone may port Heimdal's
libkafs to MIT).  Their preferred method is to use krb5-config --
which would only work if MIT incorporated (or wrote) the port, or if a
third party wrote a libkafs patch to MIT Kerberos that incorporated
changes to krb5-config.
(http://marc.theaimsgroup.com/?l=openssh-unix-dev&m=107363804131871&w=2)

Yes, I've seen krbafs (http://web.mit.edu/openafs/krbafs/), which is a
port of KTH Kerberos's libkafs to MIT Kerberos 4 and 5.  But because
KTH Kerberos is a Kerberos 4 clone, a client that uses krbafs needs
Kerberos 4 credentials, even if you've linked it against the Kerberos
5 libraries.

PS:  Has someone has already started work on a port of Heimdal's
libkafs to MIT Kerberos 5, or something equivalent?  Does anyone know?



More information about the krbdev mailing list