[Freeipa-devel] Re: [Samba] Samba4 and freeipa

[simo]

On Thu, 2009-01-08 at 11:38 +1100, Andrew Bartlett wrote:
> Given the madness that lies around Kerberos trusts, why not just have
> one KDC? (given the progress MIT has made, it could certainly just be
> more plugins to their KDC, or Samba4's Heimdal reading the shared
> database)  

At some point it would be nice, indeed, to get there, and the sooner we
can start thinking about that solution the better.
But in the short term we will have to support trusts anyway and in the
process we will learn more about what is needed by all clients and
servers alike.

Simo.

-- 
Simo Sorce
Samba Team GPL Compliance Officer <simo at samba.org>
Principal Software Engineer at Red Hat, Inc. <simo at redhat.com>