[7982] in Kerberos
Re: kpasswd problem
daemon@ATHENA.MIT.EDU (Barry Jaspan)
Mon Sep 16 17:15:13 1996
Date: Mon, 16 Sep 1996 16:48:16 -0400
From: "Barry Jaspan" <bjaspan@MIT.EDU>
To: Ken Hornstein <kenh@cmf.nrl.navy.mil>
Cc: kerberos@MIT.EDU
In-Reply-To: [7979]
Personally, I think it's dumb that you have to use krb524init at all for
aklog. I think Doug Engert's solution of having aklog getting an V5 AFS
ticket and converting _that_ makes a whole lot more sense; I'm currently
using a modified version of that and it works very well.
When I wrote krb524 at OV, we (Marc Horowitz and I) discussed this
very issue. We decided that k524init had to be a separate program
because we needed a V4 ticket-granting ticket, since we wanted to use
AFS and also interoperate with several V4 services at MIT (Zephyr and
Discuss, among others). Since we had k524init anyway, and were
running it in our dotfiles anyway, it was less effort just to leave
aklog as a V4 program.
I designed krb524 to make it easy to integrate directly into programs
like aklog, though. So if you want to make a V5-aware aklog, great.
But k524init exists for a good reason.
Barry
