Re: [Announce] Samba 4.7.0 Available - PKINIT support for smart cards with MIT Krb?

classic Classic list List threaded Threaded
2 messages Options
Reply | Threaded
Open this post in threaded view
|

Re: [Announce] Samba 4.7.0 Available - PKINIT support for smart cards with MIT Krb?

Samba - General mailing list
Hi,

i have a question regarding the smart card support in connection with
this announcement:

 > Samba AD with MIT Kerberos
--------------------------
 > Missing features, compared to Heimdal, are:
 >    * PKINIT support
 >    * S4U2SELF/S4U2PROXY support
 >    * RODC support (not fully working with Heimdal either)

Does it mean the "PKINIT support" will never be a part of the Samba 4
with MIT Kerberos, or there is chance the support will be added in future?

Thank You,
with br,



--
*Karel Lang*
*Unix/Linux Administration*
[hidden email] | +420 731 13 40 40
AUFEER DESIGN, s.r.o. | www.aufeerdesign.cz


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba
Reply | Threaded
Open this post in threaded view
|

Re: [Announce] Samba 4.7.0 Available - PKINIT support for smart cards with MIT Krb?

Samba - General mailing list
On Tue, 2017-10-31 at 23:34 +0100, Karel Lang AFD via samba wrote:

> Hi,
>
> i have a question regarding the smart card support in connection with
> this announcement:
>
>  > Samba AD with MIT Kerberos
> --------------------------
>  > Missing features, compared to Heimdal, are:
>  >    * PKINIT support
>  >    * S4U2SELF/S4U2PROXY support
>  >    * RODC support (not fully working with Heimdal either)
>
> Does it mean the "PKINIT support" will never be a part of the Samba 4
> with MIT Kerberos, or there is chance the support will be added in future?

It would require development, if this is important to you in a
restricted timeframe then you may wish to assist with that.

Otherwise in general: the folks from Red Hat who have done the work are
intending to close the feature gap in time.

Thanks,

Andrew Bartlett
--
Andrew Bartlett
https://samba.org/~abartlet/
Authentication Developer, Samba Team         https://samba.org
Samba Development and Support, Catalyst IT  
https://catalyst.net.nz/services/samba





--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba