[2098] in Kerberos
Re: is kadmind exportable as a binary? if so, begging letter.
daemon@ATHENA.MIT.EDU (George Michaelson)
Sat Aug 15 01:10:55 1992
Date: Sat, 15 Aug 1992 04:41:54 GMT
From: ggm@brolga.cc.uq.oz.au (George Michaelson)
To: kerberos@shelby.Stanford.EDU
mamros@athena.lkg.dec.com (Shawn Mamros) writes:
>As an experiment, I tried just now running an ULTRIX Kerberos daemon with
>an MIT kadmind, and the MIT kadmin client. Worked fine here.
This is a test I have been unable to repeat myself. I thus agree with your
following conclusions:
>My guess is that there's something different between your DES routines
>and the ones MIT used.
This is what I shall have to persue. I would be interested in seeing a
US hosted kerberos expert review how the externally written bones+DES
code differs from MIT's exportable bones code. Any volounteers? Doing this
outside the states is not simple.
Apologies to DEC if they feel maligned by me. I took what I observed to
represent export-provision changes to runtime functionality. Instead I
know have to presume the public DES code, or at least some uses of it,
cause subtle but self-consistant bugs which mean it will encode/decode
itself but not interop cleanly. Woe and weeping. Bebungling this is going
to be a total bummer.
>Disclaimer: I'm not speaking as any sort of "official representative", merely
>as one who has access to both ULTRIX and MIT sources.
Disclaimer: I am a complete kerberos ignoramus. I'm just trying to bang
the rocks together and make sparks...
-George
--
George Michaelson
G.Michaelson@cc.uq.oz.au The Prentice Centre | There's no market for
University of Queensland | hippos in Philadelphia
Phone: +61 7 365 4079 QLD Australia 4072 | -Bertold Brecht
