Deprecate and remove the "tkey-gssapi-credential" option
The CHANGES
entry accompanying the introduction of the
tkey-gssapi-keytab
option (back from 2010) suggests that this
option is intended to supersede tkey-gssapi-credential
:
2987. [func] Improve ease of configuring TKEY/GSS updates by
adding a "tkey-gssapi-keytab" option. If set,
updates will be allowed with any key matching
a principal in the specified keytab file.
"tkey-gssapi-credential" is no longer required
and is expected to be deprecated. (Contributed
by Andrew Tridgell of the Samba project.)
[RT #22629]
Given that the documentation for TKEY-related configuration knobs is already tricky to plow through for someone not well-versed in GSSAPI (like yours truly), I guess having multiple ways of configuring that machinery is a cherry on top.
If I am reading the documentation correctly, I think tkey-domain
could
perhaps also be ripped out, but the relationship between all the moving
parts is not quite clear to me.