[29428] in Kerberos
Re: Help: noaddresses help
daemon@ATHENA.MIT.EDU (jonr@destar.net)
Fri Mar 7 22:50:46 2008
Message-ID: <20080307184959.4kysw7d59ookgco0@www.destar.net>
Date: Fri, 7 Mar 2008 18:49:59 -0900
From: jonr@destar.net
To: kerberos@mit.edu
In-Reply-To: <4e51a8570803071900y7c6e523enb35ba720de73f89e@mail.gmail.com>
MIME-Version: 1.0
Content-Disposition: inline
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Quoting Jeet Joshi <jeetjoshi4u@gmail.com>:
> Hello everyone,
>
> I am desperately needing help on problem I am facing for
> internetwork kerberos communication. Please find previous posts at
>
> http://groups.google.com/group/comp.protocols.kerberos/browse_thread/thread/4483be3d29e55275/85516909c1c362da#85516909c1c362da
>
> Please, help needed as soon as possible. I have to complete it by deadline
> which is this Sunday.
>
> Thanks
> Jeet
Hello Jeet,
I think you need to look at cross realm authentication if you have two
separate networks. Also, you have to 'kinit' before you can login
without a password and DO NOT allow root to ssh to a box. If you allow
root to ssh and someone gets the password, with kerberos they will
have the keys to the kingdom.
Hope that helps,
Jon
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
