Thread: State of Kerberos v4 support
I'm working over the "kerberos service principal name" patch that's in the queue to make it good enough for application. During which I noticed it touches both kerberos 4 and kerberos 5 code, which leads me to two questions: 1) Does anybody actually use Kerberos v4? Considering it's been declared dead long ago, is considered insecure, and the latest release my MIT was sometime back in 1996, and they've declared it officially dead (in favour of Kerberos v5). 2) It has been deprecated in PostgreSQL since version 7.4. Is it perhaps time to rip it out? The main reason I'm asking is that I'm unable to test anything that I do in that part of the code, so I either need somebody to help me with that, we rip it, or I code without testing... //Magnus
"Magnus Hagander" <mha@sollentuna.net> writes: > 1) Does anybody actually use Kerberos v4? The last time it was proposed that we remove it, somebody popped up and said they were still using it. You could check the archives and try to contact that person for help in testing. If there's no one willing to help test that it still works, then I'd say it's time to rip it out ... regards, tom lane
On Fri, May 06, 2005 at 05:00:36PM +0200, Magnus Hagander wrote: > I'm working over the "kerberos service principal name" patch that's in > the queue to make it good enough for application. During which I noticed > it touches both kerberos 4 and kerberos 5 code, which leads me to two > questions: > > 1) Does anybody actually use Kerberos v4? Considering it's been declared > dead long ago, is considered insecure, and the latest release my MIT was > sometime back in 1996, and they've declared it officially dead (in > favour of Kerberos v5). > > 2) It has been deprecated in PostgreSQL since version 7.4. Is it perhaps > time to rip it out? > > The main reason I'm asking is that I'm unable to test anything that I do > in that part of the code, so I either need somebody to help me with > that, we rip it, or I code without testing... > I vote for ditching the Kerberos v4 support completely. Ken