arla + KfM + cmu's krbafs = no joy :-(

[Alexandra Ellwood]

>That's great news ... a couple of questions, though:
>
>(1) When you say "hand your patches back to the openafs folks", do 
>you mean the maintaner of the cmu krbafs library, or the openafs 
>folks and the arla folks (I mean, where is the code that needs to be 
>patched?)

To the CMU folks who were maintaining the copy which the Arla web 
site links to.  If they are not the official maintainers of krbafs, 
someone should let me know where to submit my patches to.

>(2) My ultimate hope in all of this is to:
[...]
>Do these hopes seem to be in line with the direction of development 
>on KfM with Arla or OpenAFS?  (I realize that the patch you describe 
>below won't provide all of the above.)

Our Kerberos.loginAuthenticator exists as a interim solution for 
sites which want a single sign-on solution to Kerberos 
authentication.  It is not designed to fulfill the login requirements 
of every site which uses Kerberos.

More importantly, we (MIT) are not investing any effort into 
improving the existing Login Authenticator.  Apple does not support 
the Login Authenticator API and will replace it with an incompatible 
API in a future automatic software update.   Hint: I personally would 
not set my site up so that it depends on a custom Login Authenticator.

However, MIT's computing environment also makes extensive use of both 
AFS and Kerberos.  So while I can't talk about specifics, we do have 
similar site requirements and desire similar functionality.

If you want to help us (and improve your chances of getting what you 
want), please report bugs and feature requests to Apple.  Increasing 
customer demand means more resources for us to improve Kerberos and 
Kerberos-using services.


--lxs
-- 
-----------------------------------------------------------------------------
Alexandra Ellwood                                               <lxs at mit.edu>
MIT Information Systems                               http://mit.edu/lxs/www/
-----------------------------------------------------------------------------
--