Ken Hornstein wrote:

> Doesn't Heimdal also ship with afslog, which does the same thing as aklog?
> Yet everyone was bugging me to make aklog work with Heimdal.  Admittedly,
> the work I am going to do in either case for asetkey is zero, so it doesn't
> matter all that much to me personally.  I just find the logic here a bit
> inconsistant.

Ken:

There is a huge difference between the two cases:

 * users execute aklog every day.   therefore it is crucial from a
   support perspective that there be a single command that works for
   everyone regardless of which Kerberos is installed.

 * AFS administrators execute 'asetkey' not users and they don't do it
   every day.   There is still a documentation and support issue which
   is why I believe that 'asetkey' must be built and installed even when
   Heimdal is the Kerberos implementation.  However, I don't think that
   'asetkey' must actually be able to set the key when Heimdal is used.
   Instead, printing an error message indicating that the appropriate
   Heimdal command should be executed instead is just fine.

Jeffrey Altman



Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Reply via email to