[1268] in Kerberos
Re: srvtab on client machines
daemon@ATHENA.MIT.EDU (Theodore Ts'o)
Fri Mar 1 03:19:20 1991
Date: Thu, 28 Feb 91 22:25:38 -0500
From: Theodore Ts'o <tytso@ATHENA.MIT.EDU>
To: "Galina Kofman" <GALINA@IBM.COM>
Cc: kerberos@ATHENA.MIT.EDU
In-Reply-To: Galina Kofman's message of Wed, 27 Feb 91 15:20:02 EST,
Reply-To: tytso@ATHENA.MIT.EDU
Date: Wed, 27 Feb 91 15:20:02 EST
From: "Galina Kofman" <GALINA@IBM.COM>
So, how does Athena distribute srvtab files?
We send the files over encrypted somehow. There are many ways to do
this, but here's one: This assumes that you have a version of rlogin
which supports DES encryption of the data stream. You would then be
able to use a program to encrypt the srvtab file (it would be OK to type
the password over the net, since you would be logged into the Kerberos
server over an encrypted channel). You could then FTP the encrypted
srvtab file to the destination machine, walk over to the destination
machine, and decrypt the srvtab file while being logged in directly to
the desintation machine. The reason why you wouldn't be able to get an
encrypted rlogin channel to the destination machine is that this
requires a srvtab, and the destination machine wouldn't have one yet.
- Ted
