> Because back in the day I didn't know even one developer who wouldn't curse when working with DCOM/Corba implementations because of convoluted complexity, bugs, and problems with debugging.
Yeah, I got that impression about COM through osmosis over the years. But come to think of it, isn't the exact same thing happening with the current trend of microservices, and super-convoluted stacks of Docker containers and Kubernetes? So perhaps the problem ultimately wasn't with COM per se :).
Group permissions predate AD by decades, PAM by a few years. SSO in today's form is a web phenomenon, so a web-oriented solution makes more sense, and there is a lot of work being done in this direction.
And LDAP, and some DNS, and certs, etc. It's not just Kerberos; you're sounding ignorant here.
>Group permissions predate AD by decades
No one said otherwise, but it goes beyond basic POSIX groups with things like nested groups, delegated group permissions, etc.
>SSO in today's form is a web phenomenon
So is AD's...
Basically, you're proving my point.
So you get new grads that are re-inventing the wheel.
Group permission, PAM, SSO, etc. It's like these developers have never been exposed to Active Directory ever in their life...