From owner-freebsd-questions@FreeBSD.ORG Mon Jan 31 16:03:45 2011 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 883FA106566B for ; Mon, 31 Jan 2011 16:03:45 +0000 (UTC) (envelope-from prvs=00126c72a7=kalts@estcard.ee) Received: from smtp.estcard.ee (smtp.estcard.ee [194.204.11.100]) by mx1.freebsd.org (Postfix) with ESMTP id 3D06C8FC16 for ; Mon, 31 Jan 2011 16:03:44 +0000 (UTC) Received: from fserv.internal ([192.168.10.3]) by smtp.estcard.ee with esmtps (TLSv1:DHE-RSA-AES256-SHA:256) (Exim 4.73) (envelope-from ) id 1Pjvyy-0004CW-4Q for freebsd-questions@freebsd.org; Mon, 31 Jan 2011 17:48:00 +0200 Received: from myhakas.internal ([192.168.21.128]) by fserv.internal with esmtps (TLSv1:AES256-SHA:256) (Exim 4.69) (envelope-from ) id 1Pjvyy-00050c-2d for freebsd-questions@freebsd.org; Mon, 31 Jan 2011 17:48:00 +0200 Received: from kalts by myhakas.internal with local (Exim 4.69) (envelope-from ) id 1Pjvyx-0004dL-Vg for freebsd-questions@freebsd.org; Mon, 31 Jan 2011 17:48:00 +0200 Date: Mon, 31 Jan 2011 17:47:59 +0200 From: Vallo Kallaste To: freebsd-questions@freebsd.org Message-ID: <20110131154759.GA17485@hape.internal> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.5.20 (2009-06-14) Subject: FreeBSD 8.2: state of Kerberos, GSS-API and (Cyrus) SASL? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: kalts@estpak.ee List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 31 Jan 2011 16:03:45 -0000 Hi I have the pleasure to post again to the FreeBSD list. Once a young die-hard FreeBSD user I was pressured to "make do" with Linux for reasons which I could not challenge. Part of those reasons have been lifted so I'm considering FreeBSD again. Googling for the subject keywords gave me quite disturbing overall feeling. I have no personal experience but it seems that things are broken from the second half of 2010 and still not recovered? I got KDC up and working on 8.2-RC2 base Heimdal without any glitch, but this is to be expected. What's the state about GSS-API and cyrus-sasl2 integration with base Heimdal? With ports Heimdal? Can I replace base Heimdal with one from ports, is it supported? Any make.conf knobs to fiddle with? Any info appreciated. thanks, -- Vallo