Re: [GENERAL] [HACKERS] [PATCHES] Removing Kerberos 4

2005-06-24 Thread Jim C. Nasby
On Thu, Jun 23, 2005 at 07:34:30PM +0200, Magnus Hagander wrote: > > Has Kerb4 been marked as depricated in the docs at all? If > > not it might be best to just do that and then yank it later. > > Yes, since 7.4. > > http://www.postgresql.org/docs/8.0/static/auth-methods.html#KERBEROS-AUT > H >

Re: [GENERAL] [HACKERS] [PATCHES] Removing Kerberos 4

2005-06-23 Thread Magnus Hagander
> Has Kerb4 been marked as depricated in the docs at all? If > not it might be best to just do that and then yank it later. Yes, since 7.4. http://www.postgresql.org/docs/8.0/static/auth-methods.html#KERBEROS-AUT H http://www.postgresql.org/docs/7.4/static/auth-methods.html#KERBEROS-AUT H "Ker

Re: [GENERAL] [HACKERS] [PATCHES] Removing Kerberos 4

2005-06-23 Thread Jim C. Nasby
On Wed, Jun 22, 2005 at 04:39:15PM -0400, Tom Lane wrote: > "Magnus Hagander" <[EMAIL PROTECTED]> writes: > > Yeah. But it has been declared dead by the Kerberos folks > > (http://www.faqs.org/faqs/kerberos-faq/general/section-7.html. And this > > document is from 2000, an dit was declared already

Re: [GENERAL] [HACKERS] [PATCHES] Removing Kerberos 4

2005-06-22 Thread Tom Lane
"Magnus Hagander" <[EMAIL PROTECTED]> writes: > Yeah. But it has been declared dead by the Kerberos folks > (http://www.faqs.org/faqs/kerberos-faq/general/section-7.html. And this > document is from 2000, an dit was declared already then)... Right. The real question here is who's going to be usin

Re: [GENERAL] [HACKERS] [PATCHES] Removing Kerberos 4

2005-06-22 Thread Magnus Hagander
> > Last chance for any Kerberos 4 users to speak up --- otherwise I'll > > apply this soon. > > If you just want someone to test it I can do that. I don't > actually use it normally though. I don't think "just testing" is enough - somebody needs to actually maintain it... > As far as securi

Re: [GENERAL] [HACKERS] [PATCHES] Removing Kerberos 4

2005-06-22 Thread Greg Stark
Tom Lane <[EMAIL PROTECTED]> writes: > Last chance for any Kerberos 4 users to speak up --- otherwise I'll > apply this soon. If you just want someone to test it I can do that. I don't actually use it normally though. As far as security issues the only issues I'm aware of is a) it uses plain DES