Date: Wed, 30 Apr 2003 21:31:56 +0200 From: "Jeroen C. van Gelderen" <jeroen@vangelderen.org> To: Garrett Wollman <wollman@lcs.mit.edu> Cc: Kris Kennaway <kris@obsecurity.org> Subject: Re: cvs commit: src/release Makefile src/release/scripts crypto-install.sh Message-ID: <67613AC6-7B42-11D7-B4E5-000393754B1C@vangelderen.org> In-Reply-To: <200304301917.h3UJH4Yj054706@khavrinen.lcs.mit.edu>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wednesday, Apr 30, 2003, at 21:17 Europe/Amsterdam, Garrett Wollman wrote: > <<On Wed, 30 Apr 2003 11:16:03 -0700, Kris Kennaway > <kris@obsecurity.org> said: > >> Hmm, is it really a good idea to combine crypto and krb5? krb5 is, I >> suspect, a rarely-used feature in the wild. > > ``The wild'' contains lots and lots of Windows Active Directory > implementations. > > For any operation larger than a few dozen hosts, Kerberos is a great > deal easier to manage than n^2 SSH key combinations. Where does the number n^2 come from? -J > (This presumes > that you have a working version of Kerberized SSH, which at present > means OpenSSH 3.4 with the patches.) Even for relatively small > installations, the convenience factor can be significant, particularly > when integrated with other operating systems infrastructure. > > -GAWollman > > _______________________________________________ > cvs-all@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/cvs-all > To unsubscribe, send any mail to "cvs-all-unsubscribe@freebsd.org" > -- Jeroen C. van Gelderen - jeroen@vangelderen.org Hatred, n.: A sentiment appropriate to the occasion of another's superiority. -- Ambrose Bierce, "The Devil's Dictionary"
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?67613AC6-7B42-11D7-B4E5-000393754B1C>