Re: State of Kerberos v4 support

On Fri, May 06, 2005 at 05:00:36PM +0200, Magnus Hagander wrote:
> I'm working over the "kerberos service principal name" patch that's in
> the queue to make it good enough for application. During which I noticed
> it touches both kerberos 4 and kerberos 5 code, which leads me to two
> questions:
>
> 1) Does anybody actually use Kerberos v4? Considering it's been declared
> dead long ago, is considered insecure, and the latest release my MIT was
> sometime back in 1996, and they've declared it officially dead (in
> favour of Kerberos v5).
>
> 2) It has been deprecated in PostgreSQL since version 7.4. Is it perhaps
> time to rip it out?
>
> The main reason I'm asking is that I'm unable to test anything that I do
> in that part of the code, so I either need somebody to help me with
> that, we rip it, or I code without testing...
>

I vote for ditching the Kerberos v4 support completely.

Ken