[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Some suggestions for the next iteration of heimdal

"Brandon S. Allbery KF8NH" <allbery@kf8nh.apk.net> writes:
> (1) hprop has a verbose mode, but it's only implemented for krb4 conversions;
> it's not used by the kaserver converter.  I have code for this for 0.0u and
> will be porting this to 0.1d sometime today.  Should this be a standard
> feature?  (It's nice for the same reason the krb4 one is: it helps to
> diagnose problems converting krb4/kaserver principals to krb5 principals.)

Yes, I think this would be useful and makes it more consistent, as well.

> (2) If you build the KDC with kaserver emulation, it's always turned on.
> Converting from an existing kaserver to heimdal requires building heimdal
> without kaserver emulation, performing the hprop to import the kaserver
> database, then rebuilding heimdal with kaserver emulation.  It would be nice
> to have a flag to kdc to disable/enable kaserver emulation, so I could run
> the initial kdc for kprop with kaserver emulation disabled (otherwise AFS
> goes wacky, as the kaserver and kdc conflict with each other and neither one
> works).  Again, I'll probably add this myself to save my sanity, but should
> it be a standard part of heimdal?  (And again, the krb4 emulation already has
> this, indirectly by specifying/not specifying the krb4 realm to handle.)

Yes, a flag for enabling/disabling kaserver support sounds good.