Return-Path: Delivered-To: apmail-harmony-dev-archive@www.apache.org Received: (qmail 79030 invoked from network); 21 Jun 2009 09:44:51 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.3) by minotaur.apache.org with SMTP; 21 Jun 2009 09:44:51 -0000 Received: (qmail 43462 invoked by uid 500); 21 Jun 2009 09:45:02 -0000 Delivered-To: apmail-harmony-dev-archive@harmony.apache.org Received: (qmail 43367 invoked by uid 500); 21 Jun 2009 09:45:01 -0000 Mailing-List: contact dev-help@harmony.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@harmony.apache.org Delivered-To: mailing list dev@harmony.apache.org Received: (qmail 43356 invoked by uid 99); 21 Jun 2009 09:45:01 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Sun, 21 Jun 2009 09:45:01 +0000 X-ASF-Spam-Status: No, hits=-0.0 required=10.0 tests=SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (athena.apache.org: domain of alex.blewitt@gmail.com designates 72.14.220.158 as permitted sender) Received: from [72.14.220.158] (HELO fg-out-1718.google.com) (72.14.220.158) by apache.org (qpsmtpd/0.29) with ESMTP; Sun, 21 Jun 2009 09:44:53 +0000 Received: by fg-out-1718.google.com with SMTP id 16so370528fgg.13 for ; Sun, 21 Jun 2009 02:44:31 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:content-type :content-transfer-encoding; bh=0rbJdQjRxEefRAVb7KizI7yXxHECvWGFyEAy/TLP+tE=; b=NEy2OabxqVwd6PA82EqXyv+wrqxeTo5PZNPs4Jt3ArbvvqXW3pn0S3JNuyZ/R6ajqN ekf/JEwDbT1gHOLyZvL1q33XAj/R58S2uyxUaGoxGXEzctXrd59FNr/+9OQq0HlPEGUr wAwU2Q96PkPQs1gbdC6hvyzvoy3lIuBVkkeUg= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type:content-transfer-encoding; b=wX9nckZmTRrb2zVlOpM87QSoqqrdxQPm8ZkDzbJxleaJpRYCFdY7xQG5gq7FYftIaI /QuGqDcOOtz+qQG6bMDm5oDyl+Ju4EWC5qzeRpAnEXP+CBHJcwnYjbL90H5lVbEBMwL1 F4QcpP/6bnb3mEchJgQxM+r3M/HB4P8sFKkG4= MIME-Version: 1.0 Received: by 10.86.93.19 with SMTP id q19mr5059117fgb.55.1245577471712; Sun, 21 Jun 2009 02:44:31 -0700 (PDT) In-Reply-To: <4A3CD336.1030102@zeus.net.au> References: <4A3CD336.1030102@zeus.net.au> Date: Sun, 21 Jun 2009 10:44:31 +0100 Message-ID: <636fd28e0906210244v745e1b25y207e407701b8a20e@mail.gmail.com> Subject: Re: [tool] kinit - Kerberos Client tool From: Alex Blewitt To: Harmony dev Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit X-Virus-Checked: Checked by ClamAV on apache.org Would be interesting to know how Apache Directory handles the Kerberos 5 authentication. "Besides LDAP it supports Kerberos 5 and the Change Password Protocol." [1] I suspect it uses the built-in JVM support for kerberos though. Kerberos is a pretty horrible beastie and there's a lot that underpins simple commands like 'kinit'. [1] http://directory.apache.org/