Re: Pinning KDC IP addresses.

On Feb 17,  1:57pm, Jeffrey Altman wrote:
} Subject: Re: Pinning KDC IP addresses.

Good morning to everyone.

> g.whurderos.org wrote:
> > Its all about choice Jeff, my choices may not meet
your needs and vice
> > versa.  In a world of configuration files and LDAP
directories it
> > doesn't seem like choice is something we need to
preclude.

> With all due respect, your choices are idealistic
dreams and do
> not represent the realities of the marketplace.  The
dreamers have
> made these arguments for almost a decade in the IETF. 
That doesn't
> effect what the manufacturers produce.

I guess that pretty much says everything.

Normally I would ask for clarification on which idealistic
dreams we
have which are not represented by the realities of the
marketplace.

I'm thinking it was the arguement we made to a number of
Open-Source
'experts' in the late 90's, also clearly rejected as without
merit,
that an open-source solution which tightly integrated
authentication,
authorization management and directory services needed to
emerge if
there was to be any hope for a credible OSS presence in
enterprise
middleware.

> Have a good weekend.
> 
> Jeffrey Altman
> Secure Endpoints Inc.

Please accept our best wishes to Secure Endpoints, MIT and
the IETF in
your mutual quest for engineering driven innovation.

}-- End of excerpt from Jeffrey Altman

As always,
Greg Wettstein

------------------------------------------------------------
------------------
			 The Hurderos Project
         Open Identity, Service and Authorization
Management
                       http://www.hurderos.org

"Don't worry about people stealing your ideas.  If your
ideas are any
good, you'll have to ram them down people's throats."
                                -- Howard Aiken
_______________________________________________
krbdev mailing list             krbdevmit.edu
https
://mailman.mit.edu/mailman/listinfo/krbdev

g.whurderos.org wrote:
> Normally I would ask for clarification on which
idealistic dreams we
> have which are not represented by the realities of the
marketplace.

The notion that NATs can be made to go away and that
end-to-end
knowledge of IP address assignment and configuration can be
restored
to the fabric of the network.  This is an idealistic dream.

> I'm thinking it was the arguement we made to a number
of Open-Source
> 'experts' in the late 90's, also clearly rejected as
without merit,
> that an open-source solution which tightly integrated
authentication,
> authorization management and directory services needed
to emerge if
> there was to be any hope for a credible OSS presence in
enterprise
> middleware.

What I would recommend for you is to get yourself involved
in the IETF.
You certainly have spent a lot of time developing your
vision of how a
number of very hard problems should be solved.  This mailing
list is
focused on MIT's implementation of standards that are
developed
within the IETF.  The place to discuss the development of
the standards
themselves is in the IETF.

Jeffrey Altman
Secure Endpoints Inc.


_______________________________________________
krbdev mailing list             krbdevmit.edu
https
://mailman.mit.edu/mailman/listinfo/krbdev