[1493] in WWW Security List Archive
Re: Web server update problem
daemon@ATHENA.MIT.EDU (Pete Shipley)
Sat Feb 17 20:19:55 1996
To: "Brian W. Spolarich" <briansp@ans.net>
cc: www-security@ns2.rutgers.edu
In-reply-to: Your message of Sat, 17 Feb 1996 10:28:41 -0500.
<Pine.SOL.3.91.960217102409.26331B-100000@thebrain.aa.ans.net>
Date: Sat, 17 Feb 1996 14:24:18 -0800
From: Pete Shipley <shipley@dis.org>
Errors-To: owner-www-security@ns2.rutgers.edu
>On Fri, 16 Feb 1996, Frode Hoem wrote:
>
>> Security of the web-server is important, therefore some kind of
>> authorization mechanism is needed. Probably that would be
>> Kerberos or a smart-card solution, any thoughts on this ?
>
> Bringing up a Kerberos server doesn't involve too much overhead.
>Ideally its a dedicated piece of hardware (BSDI on a Pentium is
>reasonably inexpensive) that only does Kerberos.
What kind of load does Kerberos put on a system?
I was under the impression that is is fairly light
and you single 486 server can support a large campus without
much of a load.
-Pete
