shishi/doc shishi.texi

[shishi-commit]

CVSROOT:        /cvsroot/shishi
Module name:    shishi
Branch:         
Changes by:     Simon Josefsson <address@hidden>        03/09/26 20:54:01

Modified files:
        doc            : shishi.texi 

Log message:
        Add.

CVSWeb URLs:
http://savannah.gnu.org/cgi-bin/viewcvs/shishi/shishi/doc/shishi.texi.diff?tr1=1.88&tr2=1.89&r1=text&r2=text

Patches:
Index: shishi/doc/shishi.texi
diff -u shishi/doc/shishi.texi:1.88 shishi/doc/shishi.texi:1.89
--- shishi/doc/shishi.texi:1.88 Fri Sep 26 20:09:16 2003
+++ shishi/doc/shishi.texi      Fri Sep 26 20:54:01 2003
@@ -1,15 +1,8 @@
 \input texinfo   @c -*-texinfo-*-
 @c Copyright (C) 2002, 2003 Simon Josefsson
address@hidden
address@hidden This file is part of the shishi
address@hidden Permission is granted to copy, distribute and/or modify this 
document
address@hidden under the terms of the GNU Free Documentation License, Version 
1.1
address@hidden or any later version published by the Free Software Foundation;
address@hidden with the Invariant Sections being with no Invariant Sections, 
with the
address@hidden no Front-Cover Texts, and with the no Back-Cover Texts.
address@hidden A copy of the license is included in the section entitled ``GNU
address@hidden Free Documentation License'' in the file 'fdl.texi'.
address@hidden
address@hidden This file is part of Shishi.
address@hidden See below for copying conditions.
+
 @setfilename shishi.info
 @documentencoding ISO-8859-1
 @include version.texi
@@ -28,15 +21,15 @@
 @quotation
 Permission is granted to copy, distribute and/or modify this document
 under the terms of the GNU Free Documentation License, Version 1.1 or
-any later version published by the Free Software Foundation; with no
-Invariant Sections, with the Front-Cover texts being ``A GNU Manual,''
-and with the Back-Cover Texts as in (a) below.  A copy of the license
-is included in the section entitled ``GNU Free Documentation
-License.''
-
-(a) The FSF's Back-Cover Text is: ``You have freedom to copy and
-modify this GNU Manual, like GNU software.  Copies published by the
-Free Software Foundation raise funds for GNU development.''
+any later version published by the Free Software Foundation; with the
+Invariant Sections including ``Criticism of Kerberos'', with the
+Front-Cover Texts being ``A GNU Manual,'' and with the Back-Cover
+Texts as in (a) below.  A copy of the license is included in the
+section entitled ``GNU Free Documentation License.''
+
+(a) The FSF's Back-Cover Text is: ``You have freedom to copy and modify
+this GNU Manual, like GNU software.  Copies published by the Free
+Software Foundation raise funds for GNU development.''
 @end quotation
 @end copying
 
@@ -72,6 +65,7 @@
 
 Appendices
 
+* Criticism of Kerberos::       Why you maybe shouldn't use Kerberos.
 * Protocol Extensions::         Description of protocol extensions used.
 * Copying This Manual::         How you can copy and share this manual.
 * Copying::                     How you can copy and share the source.
@@ -2418,6 +2412,25 @@
 @c **********************************************************
 @c *******************  Appendices  *************************
 @c **********************************************************
+
address@hidden Criticism of Kerberos
address@hidden Criticism of Kerberos
+
+The intention with this section is to discuss various problems with
+Kerberos 5, so you can form a conscious decision how to deploy and use
+Shishi correctly in your organization.
+
address@hidden
+* No encryption scheme with security proof.
+
+* No standardized API, and GSS mechanism lack important functionality.
+
+* Lack of authorization system.  (krb5_kuserok())
+
+* Host to realm mapping relies on insecure DNS or static configuration files.
+
+* Informational model and user database administration.
address@hidden verbatim
 
 @node Protocol Extensions
 @appendix Protocol Extensions