From owner-freebsd-security@FreeBSD.ORG  Mon Jun  7 19:43:07 2010
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 2582C1065676
	for <freebsd-security@freebsd.org>;
	Mon,  7 Jun 2010 19:43:07 +0000 (UTC)
	(envelope-from lx@redundancy.redundancy.org)
Received: from redundancy.redundancy.org (75-101-96-57.dsl.static.sonic.net
	[75.101.96.57]) by mx1.freebsd.org (Postfix) with SMTP id C2B5F8FC25
	for <freebsd-security@freebsd.org>;
	Mon,  7 Jun 2010 19:43:06 +0000 (UTC)
Received: (qmail 20000 invoked by uid 1001); 6 Jun 2010 23:59:57 -0000
Date: Sun, 6 Jun 2010 16:59:57 -0700
From: "David E. Thiel" <lx@FreeBSD.org>
To: freebsd-security@freebsd.org, freebsd-current@freebsd.org
Message-ID: <20100606235957.GE3022@redundancy.redundancy.org>
References: <AANLkTik213g_8W2ocr3mCCb2EED8RBXsYBavdYll1PI_@mail.gmail.com>
	<19467.61790.690469.182207@hergotha.csail.mit.edu>
	<alpine.BSF.2.00.1006061221130.73670@legolas.orthanc.ca>
	<4C0BF89F.90908@FreeBSD.org>
	<alpine.BSF.2.00.1006061240460.73670@legolas.orthanc.ca>
	<4C0BFBAB.9030808@FreeBSD.org>
	<AANLkTimRWT9cubiEOg2bZujxvc_DHsYNu2V5r4-fyXpd@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <AANLkTimRWT9cubiEOg2bZujxvc_DHsYNu2V5r4-fyXpd@mail.gmail.com>
X-OpenPGP-Key-fingerprint: 482A 8C46 C844 7E7C 8CBC 2313 96EE BEE5 1F4B CA13
X-OpenPGP-Key-available: http://redundancy.redundancy.org/lx.gpg
X-Face: %H~{$1~NOw1y#%mM6{|4:/<p]y9X%E+4%:1wo-M!re,
	zl.qH~yzbL-MWhtp$3QuKP&di/a{FOctD[FuX.\n4U*,
	M{TJg$oYp663.NyX!%H~~Tw$eR9xZU5W?1BM#t"a@'27^2x
User-Agent: Mutt/1.5.20 (2009-06-14)
Cc: 
Subject: Re: Our aging base system krb5 [heimdal]
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Security issues \[members-only posting\]"
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 07 Jun 2010 19:43:07 -0000

On Sun, Jun 06, 2010 at 08:15:33PM +0000, b. f. wrote:
> What incompatibilities exist between that latest versions of the MIT
> Kerberos and Heimdal implementations? How does des@ feel about it,
> since libpam and openssh may have to be altered?

My experience is a few years old, but last time I tried working with
them together, I found the protocol used by kadmin was incompatible
between the two implementations.