Sorry for the dupe Garrett, forgot to copy the list......
> What ``extremely colorful history of ... vulnerabilities''? I can
> think of no more than five times I've had to rebuild my KDC in six
> years.
...and nearly every security advisory I've seen for Kerberos 5 in the
last year or two was actually for the Kerberos 4 compatibility code.
One of the reasons I always build the port with "KRB5_KRB4_COMPAT=NO".
The only exception I can think of at the moment was the XDR/RPC buffer
overflow, which hit a LOT of software.
Craig