Re: aname_to_locaname vs gssapi svc/host.domain.org@REALM

On Wed, Oct 26, 2011 at 3:06 PM,  <[email protected]> wrote:
> (Kerberos is about management of identities, so I feel that the above
> is not totally offtopic here.)

This thread is no longer frustrating anyways :)

Kerberos is about authentication, and also about communication of some
authorization information.  But it's not about management of
identities.  Kerberos does need management, but that has to be
provided by the user in the case of Heimdal or MIT krb5 (as opposed to
fully integrated systems like AD, that integrate Kerberos, LDAP, DNS,
..., though obviously many people still need to interface AD with, or
layer above it, other management frameworks, such as often HR
systems).  I think this is somewhat on-topic though because it is at
least important that Heimdal provide interfaces that make it easy to
integrate into other systems.

Nico
--