Re: PKINIT support in which version?

["Douglas E. Engert" <deengert@anl.gov>]

Henry B. Hotz wrote:

> 
> On Mar 9, 2006, at 2:07 PM, Douglas E. Engert wrote:
> 
>>
>>
>> Henry B. Hotz wrote:
>>
>>> I'm assuming that the final draft-34 version of PKINIT isn't  what's  
>>> supported in the latest released version of Heimdal, 0.7.2.
>>> Are the daily snapshots good enough, or do I need some CVS variant  
>>> to  get the current PKINIT support?
>>
>>
>> I was using the daily snapshots, to use the client with the W2K
>> compatibility code.  I added CPPFLAGS="-DPKINIT"
> 
> 
> Don't know what all the differences were, but are there security  issues 
> with being W2K compatible vice official RFC compliant?  Can  you be both?

We want to use Windows AD as the KDC. When Microsoft gets the AD updated
we will switch. It looks like the Heimdal code will beable to do both.



> 
> ------------------------------------------------------------------------ 
> ----
> The opinions expressed in this message are mine,
> not those of Caltech, JPL, NASA, or the US Government.
> Henry.B.Hotz@jpl.nasa.gov, or hbhotz@oxy.edu
> 
> 

-- 

  Douglas E. Engert  <DEEngert@anl.gov>
  Argonne National Laboratory
  9700 South Cass Avenue
  Argonne, Illinois  60439
  (630) 252-5444