[684] in ad-lib
Re: strange logging in to emmy
daemon@ATHENA.MIT.EDU (gyoung@MIT.EDU)
Wed May 24 16:45:31 1995
From: gyoung@MIT.EDU
To: Patricia Flanagan <patf@MIT.EDU>
Cc: ad-lib@MIT.EDU
In-Reply-To: Your message of "Wed, 24 May 1995 11:32:00 EDT."
<9505241532.AA28522@rotch-ref-2.MIT.EDU>
Date: Wed, 24 May 1995 16:44:45 EDT
>> Does anyone know why the login to emmy works strangely now? After the
>> telnet, you used to get the login prompt and then the password prompt.
>> Now, every time, you get the password prompt first and various warning
>> messages. Is it supposed to happen this way now?
>>
>> Pat
The answer is kerberos. We've been implementing various pieces of
kerberos on the system. Kerberos is the network security /
authentication service that Athena uses to make sure you are who you say
you are and prevents people from eavesdropping on your network
connections. Privacy and security concerns make implementing kerberos
on emmy a high priority in the implementation.
If you telnet directly from your PC to emmy you get a standard login
prompt.
If you login from athena you have some kerberos authentication
information that's passed along when you connect. From that information
emmy knows who you are. That's why your login name is the same for emmy
and athena. The messages you're getting that you can't be authenticated
are OK. In fact, right now that's what we want. Eventually when
kerberos is set up properly on your PC you may only need to login once a
day using a program called Leash. Then when you connect to a kerberized
machine (like Athena or Ereq or emmy) kerberos will log you in
automatically.
Unfortunately, for now we haven't quite figured out how to let Advance
know who you are so that it can apply the appropriate safeguards to your
permissions, but we're getting there.
Pretty soon we'll also be testing a kerberized telnet for DOS. Once we
have that, logging in via Athena or directly will look the same.
-- Grant Young, Libraries Systems Office
