3 ms·

The kerberos described in http://web.archive.org/web/20140222133423/http://www.networkworld.com/news/2000/0511kerberos.html http://web.archive.org/web/201402221

by pgeorgi 11y ago

The kerberos described in http://web.archive.org/web/20140222133423/http://www.networkworld.com/news/2000/0511kerberos.html http://web.archive.org/web/20140222133423/http://www.network...?

sudioStudio64 11y ago
That was from 2000. Since then they have released all of their protocols as open spec documents. https://msdn.microsoft.com/en-us/openspecifications/default https://msdn.microsoft.com/en-us/openspecifications/default Their kerberos implementation works with heimdal and mit. They used an optinal field to include group membership data so that authorization decisions could be made from the contents of the ticket. https://msdn.microsoft.com/en-us/library/gg604662.aspx https://msdn.microsoft.com/en-us/library/gg604662.aspx I'm just saying. Times have changed. Will they ever be as open as an open source project run by volunteers? No. Have they dramatically improved their position in response to the very real criticisms of their past behavior. Yes.
- atonse 11y ago
  > Will they ever be as open as an open source project run by volunteers? No. The ASP.NET and other .NET teams beg to differ. Their code (not some mirror) is hosted on Github and Apache licensed. You can fork it just like any other open source project. So yes, parts of Microsoft's tech is actually free and open, for all practical definitions of free and open (the GNU people's pedantic arguments about Apache not withstanding)
  - sudioStudio64 11y ago
    Very true. I was just saying that they are always going to be different than some of the more open structures in FOSS land. Not worse...just different. The ASP.net team is kicking major ass.
mhurron 11y ago
The kerberos that I authenticate Linux and Solaris boxes against Active Directory with every day.
- pgeorgi 11y ago
  ... which required a lot of pressure, by two major economic blocs. At some point people get tired of that.
  - mhurron 11y ago
    [citation needed] because it was always possible with very little configuration.

by pgeorgi 11y ago

The kerberos described in http://web.archive.org/web/20140222133423/http://www.networkworld.com/news/2000/0511kerberos.html http://web.archive.org/web/20140222133423/http://www.network...?

sudioStudio64 11y ago

That was from 2000. Since then they have released all of their protocols as open spec documents. https://msdn.microsoft.com/en-us/openspecifications/default https://msdn.microsoft.com/en-us/openspecifications/default Their kerberos implementation works with heimdal and mit. They used an optinal field to include group membership data so that authorization decisions could be made from the contents of the ticket. https://msdn.microsoft.com/en-us/library/gg604662.aspx https://msdn.microsoft.com/en-us/library/gg604662.aspx I'm just saying. Times have changed. Will they ever be as open as an open source project run by volunteers? No. Have they dramatically improved their position in response to the very real criticisms of their past behavior. Yes.

atonse 11y ago
> Will they ever be as open as an open source project run by volunteers? No. The ASP.NET and other .NET teams beg to differ. Their code (not some mirror) is hosted on Github and Apache licensed. You can fork it just like any other open source project. So yes, parts of Microsoft's tech is actually free and open, for all practical definitions of free and open (the GNU people's pedantic arguments about Apache not withstanding)
- sudioStudio64 11y ago
  Very true. I was just saying that they are always going to be different than some of the more open structures in FOSS land. Not worse...just different. The ASP.net team is kicking major ass.

mhurron 11y ago

The kerberos that I authenticate Linux and Solaris boxes against Active Directory with every day.

pgeorgi 11y ago
... which required a lot of pressure, by two major economic blocs. At some point people get tired of that.
- mhurron 11y ago
  [citation needed] because it was always possible with very little configuration.