[6625] in Kerberos
Re: Too many kerberoi for Macintosh?
daemon@ATHENA.MIT.EDU (Sam Hartman)
Wed Feb 7 20:27:44 1996
To: kerberos@MIT.EDU
From: hartmans@MIT.EDU (Sam Hartman)
Date: 07 Feb 1996 20:13:37 -0500
In-Reply-To: msattler@jungle.com's message of Mon, 05 Feb 1996 23:17:16 -0800
The confusing number of different incompatible Kerberos
implementations for Mac and Windows is an unfortunate side effect of
not considering these platforms in the original design of the Kerberos
API.
Fortunately, I don't think the problem exists to a great
degree for krb5 APIs; ther is DCE vs krb5, but hopefully these will
converge.
I'm not saying that everyone should use the MIT
implementation, although it would be nice if people would use a common
code base. I believe the krb5 API is flexible enough to support
concepts like storing tickets in memory on Windows and Mac, using
native configuration facilities like the Win95 registry, etc.
Hopefully, as people modify the MIT code to implement these features,
or start from scratch, the application level API will be preserved,
and DLL mechanisms will allow users to choose their Kerberos
implementation, avoiding problems like deciding between Umich's
Kerberos95 and the MIT distribution.
(GSSAPI also plays an important role in creating a standard
interface for Kerberos applications.)
--Sam
