[19448] in Kerberos
Re: Designing mid-sized site
daemon@ATHENA.MIT.EDU (Shishir Nagaraj)
Thu Jun 19 23:08:17 2003
Message-ID: <3EEF15A6.3050902@novell.com>
Date: Tue, 17 Jun 2003 18:50:38 +0530
From: Shishir Nagaraj <nshishir@novell.com>
MIME-Version: 1.0
To: Lukas Kubin <kubin@opf.slu.cz>
In-Reply-To: <seee95a4.024@prv-mail25.provo.novell.com>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
cc: Kerberos@mit.edu
cc: Karl Naegle <KNAEGLE@novell.com>
Errors-To: kerberos-bounces@mit.edu
You don't need to move away from Novell Netware if what you want is
kerberos authentication of eDirectory/LDAP users, against a netware box.
There are ways of managing LDAP/eDirectory names and kerberos principals
in a truly integrated manner, to deliver a "single point of administration".
Karl Naegle(knaegle@novell.com) could give you more information on the
specifics.
Thank you.
Shishir.
>>>>Lukas Kubin <kubin@opf.slu.cz> 6/11/2003 9:41:21 PM >>>
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> We are in the process of converting our university network from Novell
> Netware to Kerberos/OpenAFS/OpenLDAP. The network counts about 7000
> users.
> There are 2 geographic locations (schools), both have their own server
> centers. There is a quite fast connection between those 2 nodes.
>
> Since this is the first time for most of us to design such a network
> using
> Kerberos, we would like to get some advice here.
>
> 1. How many realms should we create? Is UNIV.ORG enough or shall we
> create
> one for each school or department? Say, UNIV.ORG and SCHOOL1.UNIV.ORG
> and
> SCHOOL2.UNIV.ORG.
>
> 2. How should we create user accounts to distinguish students,
> employees
> for each school, similarly to the Novell's "context" concept? At the
> same
> time we need everybody to be able to log-in in any computer throughout
> the
> university network without much effort.
>
> Thank you.
>
> lukas
>
> - --
> Lukas Kubin
>
> phone: +420596398285
> email: kubin@opf.slu.cz
>
> Information centre
> The School of Business Administration in Karvina
> Silesian University in Opava
> Czech Republic
> http://www.opf.slu.cz
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.1 (GNU/Linux)
> Comment: Made with pgp4pine 1.75-6
>
> iD8DBQE+51SuhukdIiZrwu4RAoYoAJ9qxOh7C9Tw3fxpUz3ZbPpULoB9UgCghXzc
> aCx98hoJz4SQ0IBD+2M23oY=
> =PSRn
> -----END PGP SIGNATURE-----
>
>
>
> ________________________________________________
> Kerberos mailing list Kerberos@mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
