[2604] in SIPB-AFS-requests
Re: Kerberos server for SIPB.MIT.EDU
daemon@ATHENA.MIT.EDU (mhpower@MIT.EDU)
Mon Jan 6 21:04:20 1997
From: mhpower@MIT.EDU
To: warlord@MIT.EDU
Cc: sipb-afsreq@MIT.EDU
In-Reply-To: "[2601] in SIPB-AFS-requests"
Date: Mon, 06 Jan 1997 21:04:05 EST
> ... Do we necessarily want all members AFS s:a
>and SUsers to effectively be kerberos administrators?
I'd guess that a lot of the application for the sipb Kerberos server
would be for principals used to authenticate to the sipb AFS cell.
Because of that, having the Kerberos server and the AFS server on the
same machine (or, actually, two of the same machines) doesn't really
open up any new access. It's true that there'd probably be some
principals created mainly for authenticating to Zephyr, and here
having a separate machine or machines for the Kerberos server might
have some benefit. Given our existing set of machines, though, I think
using the AFS servers would be the best overall choice.
Matt
