[37501] in Kerberos

home help back first fref pref prev next nref lref last post

Building your own vs. deploying OS packaged version of MIT Kerberos?

daemon@ATHENA.MIT.EDU (Tareq Alrashid)
Fri May 13 10:50:47 2016

From: Tareq Alrashid <tareq@qerat.com>
Date: Fri, 13 May 2016 10:47:09 -0400
Message-Id: <64F47B0A-6B01-43EF-89D0-3AA99DECDF15@qerat.com>
To: kerberos@mit.edu
Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\))
Cc: Tareq Alrashid <tareq@qerat.com>
Content-Type: text/plain; charset="utf-8"
Errors-To: kerberos-bounces@mit.edu
Content-Transfer-Encoding: 8bit

The new world order seem to demand some adjustments to how we do things nowadays with on premise and cloud service deployment.  We know how many OS’es come with prebuilt versions Kerberos RHEL/OS X…etc.,  and I am starting to ponder if efficiency could be optimized if we no longer built our own Kerberos binaries from downloaded MIT source, but rather just configure OS’s e.g. RHEL 7 version of krb5-1.13?  RedHat does release security patches with OS patches and that can save us some manual labor.

Is this an obvious non-issue as which version we choose to deploy or is the known philosophy, I have been following since 1999; download from MIT and build on my own.

I have my own opinion, but I also wonder what others had in mind

Thank you,
Tareq
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos


home help back first fref pref prev next nref lref last post