Re: kpasswd

[Allan E Johannesen <aej@WPI.EDU>]

>>>>> "Frank.Swasey" == Frank Swasey <Frank.Swasey@uvm.edu> writes:

Frank.Swasey> Whatever does that for me is fine -- {KERBEROS}user@realm is just
Frank.Swasey> so easy to use and works well.

Frank.Swasey> I have never heard anyone complain that it didn't work.

Well, I think I've seen claims that MIT kerberos is not thread-safe.  I've gone
through some OpenLDAP versions which seemed to crash in an area which looked to
me to be vaguely associated with kerberos, so I think I believe it.  I don't
recall which minor versions those were and it's unclear why one version or
another would be more susceptible to failure if the problem was in kerberos,
which is not changing.  However, if some software is broken, we all know that
failure can be unpredictable.

If there is anyone who has actually looked into it and knows how to wrap the
area into a single thread, maybe that will solve it.

I appreciate that Kurt doesn't want to continue to drag along broken stuff.
I've been through ISO quipu, U.Mich LDAP, and now OpenLDAP, and clearly this is
the best situation I've enjoyed, so I appreciate the development efforts.