Kerberos and the World
I've recently gotten MIT Kerberos5 running on my servers both at home and at work. It was a fun (and easy) exercise, for the most part. There was a bit of trouble with Debian's OpenSSH being old (and not supporting gssapi-with-mic), but I fixed that with some unstable-apt goodness.
Now my problem is, I can't find any good network services that are gssapi-enabled. All of my services authenticate out of the Kerberos database fine, using PAM, but I'm lacking that single sign-on that I was aiming for.
Notably, there seems to be no way to get Dovecot or Exim to use GSSAPI.
::sigh::