KRB5 implementation for JtR, free license

David Paleino d.paleino at
Sun Jan 18 15:58:01 UTC 2009

I'm writing to you because I was adding the KRB5 implementation patch to JtR,
and you're listed as the author in src/KRB5_fmt.c (the copyright holder is not
a "human", but I believe you could have contacts there).
However, to be able to include the patch in Debian, we need a free license.
Currently, you're not granting any right:

 * KRB5_fmt.c
 *  Kerberos 5 module for John the Ripper by Solar Designer, based on the
 *  KRB4 module by Dug Song.
 * Author: Nasko Oskov <nasko at>
 * Licensing:
 *  The module contains code derived or copied from the Heimdal project.
 *  Copyright (c) 1997-2000 Kungliga Tekniska Högskolan
 *  (Royal Institute of Technology, Stockholm, Sweden).
 *  All rights reserved.
 *  Which is distribution of Kerberos based on M.I.T. implementation.
 *  Copyright (C) 1990 by the Massachusetts Institute of Technology

If you wish the patch to be added to the official Debian package, please
consider licensing the code under a DFSG-free license, such as GPL, BSD or
MIT/X11 (there are many others, though).

As far as I can see from , the latest Heimdal releases are
released under BSD-3. Another option would then be rewriting the "plugin"
basing from a BSD-3-licensed version of Heimdal.

David Paleino

 . ''`.  Debian maintainer |
 : :'  : Linuxer #334216 --|--
 `. `'`  GPG: 1392B174 ----|----
   `-   2BAB C625 4E66 E7B8 450A C3E1 E6AA 9017 1392 B174
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 197 bytes
Desc: not available
Url : 

More information about the Pkg-john-devel mailing list