Hi, I'd like to echo the bug's original submitter and provide another reason this should be done:
With the current version of pykerberos in Debian, it is impossible to communicate with a Microsoft IIS server with fairly common settings, as it seems it makes it very easy to turn on a requirement for channel bindings. Worse, when this is the case, the failure mode is incredibly non-obvious - I spent a day or so analysing ASN.1 dumps to try to figure out why some clients worked and others didn't. The current version of pykerberos in Debian was released in 2017! Please update to 1.2.4 from 2022. Note that the pykerberos project now bears this message "NOTE: this fork of ccs-kerberos is currently on life support mode as Apple has resumed work on upstream. Please try to use https://pypi.python.org/pypi/kerberos instead of this fork if possible." however I suggest this message is no longer accurate as the referenced PyPI project has NOT had any release since 2021, and the related GitHub repository has since been archived ( https://github.com/apple/ccs-pykerberos). Thus, pykerberos remains the least-inactive project, and it is not worth Debian switching forks.
