* Rewrite kftgt's README.Debian. Explain that this package is

  obsolete, suggest alternatives, update the required packages, and
  request anyone not at Stanford who is still using it contact me.

diff --git a/debian/changelog b/debian/changelog
index 330bd1ee97f84aed6e508e98da9a6f5ff0895278..ad66f8e48e49041446942eb487144825bc7a0edb 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,5 +1,8 @@
 kftgt (1.14-3) UNRELEASED; urgency=low
 
+  * Rewrite kftgt's README.Debian.  Explain that this package is
+    obsolete, suggest alternatives, update the required packages, and
+    request anyone not at Stanford who is still using it contact me.
   * Add a Homepage control field.
   * Update standards version to 3.7.3 (no changes required).
 

diff --git a/debian/kftgt.README.Debian b/debian/kftgt.README.Debian
index 50079af82015cc1b71780f6913eb4504bd212b15..7df30f469d692681a25a00e26771a7bce7be38b1 100644 (file)
--- a/debian/kftgt.README.Debian
+++ b/debian/kftgt.README.Debian
@@ -1,12 +1,29 @@
-To use this package with Stanford's Kerberos infrastructure, use a set
-of commands similar to the following:
+kftgt for Debian
+----------------
 
-       kinit -f <username>@stanford.edu        # get k5 ticket
-       kinit -4 <username>@IR.STANFORD.EDU     # get k4 ticket
-       klogin <hostname>
+This package is obsolete and is still maintained only for backwards
+compatibility for previous users.  All users of Kerberos v4 and
+particularly the AFS kaserver (the only Kerberos v4 KDC really supported
+by this package) should upgrade to Kerberos v5, which has built-in support
+for ticket forwarding.
 
-You will also need the krb5-user package.  Configuration files
-/etc/krb.conf, /etc/krb5.conf, and /etc/krb.realms may be copied
-from any Stanford machine.
+The klogin and krsh wrappers will forward Kerberos v5 tickets and will
+ignore failures due to lack of Kerberos v4 tickets or failure to forward
+Kerberos v4 tickets so that they can be used to contact hosts that only
+support Kerberos v5.  However, users can run rlogin -x -f or rsh -x -f
+instead (possibly through an alias).
 
- -- Ben Pfaff <pfaffben@debian.org>, Tue Aug 17 10:44:05 2004
+If you do need to log in to a non-Kerberos-v5 system, first obtain
+Kerberos v4 tickets and then use klogin.  An example for Stanford:
+
+    kinit -f <username>@stanford.edu            # get k5 ticket
+    kinit -4 <username>@IR.STANFORD.EDU         # get k4 ticket
+    klogin <hostname>
+
+You will also need the krb5-user, krb4-config, and krb5-config packages.
+
+This package will probably be dropped from Debian after Stanford converts
+to Kerberos v5, currently scheduled for April of 2008.  If anyone at
+another site is still using this package, please mail me.
+
+ -- Russ Allbery <rra@debian.org>, Sat, 29 Dec 2007 17:25:52 -0800