On Thu, Aug 05, 2010 at 05:23:27PM -0700, Danek Duvall wrote: > Will Fiveash wrote: > > > pkg:/system/security/kerberos-5 appears to bundle mostly things > > associated with the KDC aspect of Kerberos and > > pkg:/service/security/kerberos-5 is stuff associated with Kerberos > > clients. There appear to be some anomalies with the contents however. > > For example usr/sbin/kclient is in pkg:/system/security/kerberos-5 but > > this should really be in pkg:/service/security/kerberos-5. There are > > several other items that should also be moved around. What we are > > unsure however is what was thought behind the original construction of > > these packages contents? > > system/security/kerberos-5 came from SUNWkdc > service/security/kerberos-5 came from SUNWkrb > > I don't think they were modified in any way -- kclient was in SUNWkdc, for > instance.
kclient being in the SUNWkdc doesn't seem correct to me either so the problem was inherited. > > Can we reorganize these packages into everything needed by krb clients > > into one package and the additional stuff to provide KDC support in the > > other or would that violate some new pkg standard? > > No, that would be welcome, and I believe that . Split them up however you > please. > > > And if we do this it would be good if we could rename the packages to > > reflect this. > > Yes. Having security/kerberos-5 under both system and service is just a > pain, but the folks doing the rename ultimately didn't have much input from > the relevant teams and had a massive number of packages to try to > coordinate, so things like this ended up happening. I can see that. I'm guessing we thought using the previous SRV4 package contents was the right thing to do but as I examine it now the content split doesn't seem to fit functional boundaries consistently. I'll open an RFE on this. -- Will Fiveash Oracle Austin, TX, USA Internal Solaris Kerberos/GSS/SASL website: http://kerberos.sfbay.sun.com http://opensolaris.org/os/project/kerberos/ _______________________________________________ on-ips-dev mailing list [email protected] http://mail.opensolaris.org/mailman/listinfo/on-ips-dev
