Tom,
> I have no corporate commitment to make PG 8.3+ work on ancient Red Hat
> versions, if that's what you mean.
Well, in that case my suggestion is that we plan to transition to GSSAPI and
drop support for raw Kerberos as soon as Henry is ready with a patch (plus
I'm going to try to get the Solaris security folks to kick in on this).
GSSAPI is the official API of Kerberos5, and in theory supporting it should
reduce the number of specific-library-version dependancy bugs we get with
Kerberos in the future.
--
Josh Berkus
PostgreSQL @ Sun
San Francisco
