[2601] in SIPB-AFS-requests
Re: Kerberos server for SIPB.MIT.EDU
daemon@ATHENA.MIT.EDU (Derek Atkins)
Mon Jan 6 10:30:25 1997
To: mhpower@MIT.EDU
Cc: sipb-afsreq@MIT.EDU
From: Derek Atkins <warlord@MIT.EDU>
Date: 06 Jan 1997 10:30:07 -0500
In-Reply-To: mhpower@MIT.EDU's message of Sun, 05 Jan 1997 20:41:55 EST
In the past we were running kaservers, not Kerberos servers... Mostly
to test the kaserver code. Do we necessarily want all members AFS s:a
and SUsers to effectively be kerberos administrators?
-derek
mhpower@MIT.EDU writes:
>
> I think it'd be a good idea to start running Kerberos servers for the
> SIPB.MIT.EDU realm on reynelda and ronald-ann (after the ronald-ann
> replacement). The main reason for this is that it's sometimes useful
> to get Kerberos principals for various sipb purposes, and it's not
> always either possible or appropriate to get these principals in the
> ATHENA.MIT.EDU realm. I believe the only one we've used in the past is
> phone-broadcast@SIPB.MIT.EDU, although one can imagine other
> applications that could serve the outside community, um, differently
> (Kerberos principals associated with archiving sipb mailing lists, for
> example). I would envision this not being considered a "test" server,
> although it could potentially be upgraded on occasion to run new code
> that wasn't yet part of an official Kerberos release. Exercising the
> V5 server code more would perhaps have the added advantage of
> hastening the day when Kerberos V4 can be eradicated from the world.
> Up until then, though, I'd expect we'd also want to run krb524d.
>
> With both reynelda and ronald-ann running on Sparc 5's, I wouldn't
> expect there'd be any significant resource contention with the AFS
> server processes. Of course, we'd probably want to try generating a
> lot of test traffic at first to confirm that that's the case.
>
> Matt
--
Derek Atkins, SB '93 MIT EE, G MIT Media Laboratory
Member, MIT Student Information Processing Board (SIPB)
Home page: http://www.mit.edu:8001/people/warlord/home_page.html
warlord@MIT.EDU PP-ASEL N1NWH PGP key available
