[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Some suggestions for the next iteration of heimdal
"Brandon S. Allbery KF8NH" <firstname.lastname@example.org> writes:
> (1) hprop has a verbose mode, but it's only implemented for krb4 conversions;
> it's not used by the kaserver converter. I have code for this for 0.0u and
> will be porting this to 0.1d sometime today. Should this be a standard
> feature? (It's nice for the same reason the krb4 one is: it helps to
> diagnose problems converting krb4/kaserver principals to krb5 principals.)
Yes, I think this would be useful and makes it more consistent, as well.
> (2) If you build the KDC with kaserver emulation, it's always turned on.
> Converting from an existing kaserver to heimdal requires building heimdal
> without kaserver emulation, performing the hprop to import the kaserver
> database, then rebuilding heimdal with kaserver emulation. It would be nice
> to have a flag to kdc to disable/enable kaserver emulation, so I could run
> the initial kdc for kprop with kaserver emulation disabled (otherwise AFS
> goes wacky, as the kaserver and kdc conflict with each other and neither one
> works). Again, I'll probably add this myself to save my sanity, but should
> it be a standard part of heimdal? (And again, the krb4 emulation already has
> this, indirectly by specifying/not specifying the krb4 realm to handle.)
Yes, a flag for enabling/disabling kaserver support sounds good.