>What's involved in making 'su' use kerberos?  I hadn't noticed the
>differences, but BSD/OS has better integrated kerberos, and I can su
>using the password for 'seebs.root' on my BSDI boxes.  Is there an easy
>way to get this out of NetBSD's kerberos implementation?

Kerberos IV has (AFAIK) always come with "ksu", which does what you
want.  Adding this support to the NetBSD su should be fairly
straightforward; when the Kerberos 5 support comes in, it will
probably be done then.  And to answer your next question ... I don't
know when that will happen, but it's in the works :-)

--Ken