From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from bifrost.lang.hm (mail.lang.hm [64.81.33.126]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by huchra.bufferbloat.net (Postfix) with ESMTPS id 8FFB721F346 for ; Wed, 25 Feb 2015 14:21:03 -0800 (PST) Received: from asgard.lang.hm (asgard.lang.hm [10.0.0.100]) by bifrost.lang.hm (8.13.4/8.13.4/Debian-3) with ESMTP id t1PML1EL031873; Wed, 25 Feb 2015 14:21:01 -0800 Date: Wed, 25 Feb 2015 14:21:01 -0800 (PST) From: David Lang X-X-Sender: dlang@asgard.lang.hm To: =?ISO-8859-15?Q?Toke_H=F8iland-J=F8rgensen?= In-Reply-To: <87mw41y6xb.fsf@toke.dk> Message-ID: References: <63285630-404F-4622-B57C-2325CD09AD1D@gmail.com> <8F0CBCA2-1CD1-4AF4-A9D9-E64D12CF2439@gmail.com> <1424892372.399929701@apps.rackspace.com> <87mw41y6xb.fsf@toke.dk> User-Agent: Alpine 2.02 (DEB 1266 2009-07-14) MIME-Version: 1.0 Content-Type: MULTIPART/MIXED; BOUNDARY="680960-1561390248-1424902861=:8772" Cc: cerowrt-devel Subject: Re: [Cerowrt-devel] Lost access to Web GUI X-BeenThere: cerowrt-devel@lists.bufferbloat.net X-Mailman-Version: 2.1.13 Precedence: list List-Id: Development issues regarding the cerowrt test router project List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 25 Feb 2015 22:21:31 -0000 This message is in MIME format. The first part should be readable text, while the remaining parts are likely unreadable without MIME-aware tools. --680960-1561390248-1424902861=:8772 Content-Type: TEXT/PLAIN; format=flowed; charset=ISO-8859-15 Content-Transfer-Encoding: 8BIT On Wed, 25 Feb 2015, Toke Høiland-Jørgensen wrote: > David Lang writes: > >> No disagreement there, but microsoft did, and as a result what would >> be needed is AD, not just kerberos. > > https://www.samba.org/samba/news/releases/4.0.0.html ? :) Yep, that's what I was thinking of. But I don't know if it achieves that other requirement (having an easy to use user interaction to manage) >> There's also the problem that kerberos requires that the time be set >> correctly, something that is very commonly not the case on home >> devices (especially things like printers) > > Do common network-enabled printers actually support kerberos (or AD)? > Even consumer-targeted devices? I'd be surprised if they did. Even if they did, do people really want to go to the hassle of connecting their device to a domain when they are at a friend's house and need to print one document? David Lang --680960-1561390248-1424902861=:8772--