ldap vs kerberos authentication for idpv3

[Jorj Bauer]

>> I just read through Scott's code, and I'm glad to say it's the second
>> implementation I've seen (in Java) that does this properly. I was
>> starting to feel lonely...
>
> Thank you for the review, I was flying blind at the time.

I feel your pain.

I didn't spend a lot of time looking at your version today but generally 
it's doing all the right things in the right order.

If anyone wants to spend more time reviewing it, this is a 
self-contained version of proper password validation via Kerberos in Java:

	https://github.com/JorjBauer/java-kpass

... that version was tested - and load tested - as well as I could 
ad-hoc against production infrastructure at Penn, with code review from 
a better Java programmer than I. I would trust it in production (with 
only the usual amount of concern over core authentication 
infrastructure). Perhaps someone can look at the two and see if there 
are any obvious differences that raise an eyebrow (or flaws in mine, 
which I'd be glad to know about).

-- Jorj