Subject: Re: etc/kerberosV unneeded?
To: Hubert Feyrer <hubert@feyrer.de>
From: Love <lha@kth.se>
List: tech-security
Date: 09/14/2005 18:55:26
--=-=-=
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable


Hubert Feyrer <hubert@feyrer.de> writes:

> On Wed, 14 Sep 2005, Love H=F6rnquist =C5strand wrote:
>>> (Also, does /etc/kerberosIV still serve any purpose at this point?)
>>
>> KerberosIV will go with next import of Heimdal. I think KerberosV should=
 be
>> removed too, the code will still check for it for compatiblity reasons
>> though.
>
> Having played with this rcently too, I have found two other things:
>   * krb5.conf(5) Xrefs non-existing verify_krb5_conf(8) (manpage
>     is present, but no programm installed!)

I'll add that program in next import, its very useful to have.

>   * why is kdc.conf in /var/heimdal and not /etc/kdc.conf?

Because that is how it always have been, I rather not change it unless its
really really needed. Most people should have no reason to have a kdc.conf
thought. The KDC also picks up /etc/krb5.conf.

Love


--=-=-=
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (Darwin)

iQEVAwUAQyhWANo1gLFKFEjAAQJtoQf+J0OQxwTiY4Njk8EpfiAZSHGco0ccsNVL
yumS+fqKRlhokNvb8tqV5WkgwnKJ63cwOAi8vMih46dGkFsZgfKmANbwFeLwlKc0
XU/XJD7/jsWMBdCniG3lnSK75meZbBwC0qbNQy2efz7A2BW3uo2O1sxgyZYSaYIS
nRfW0IYTG6VWDXUfZXlHHkAEZlNn1Zn/qy21lrYrQThq4pBt1iwsSuOX8FP81OYv
HUAkbdAhh0XVaf7MN+F+YbXkxvF6fBfaUUH30d5GS6aPKwl/fsWl2r+Q7E6hdN2F
zMLB8DmYow6M4UpkrN8Mk5VV5EbVm6vO4/LiQz8y8JO1OH2lHxYJ/Q==
=4EZX
-----END PGP SIGNATURE-----
--=-=-=--