[2228] in Kerberos
Re: Kerberos & X.509
daemon@ATHENA.MIT.EDU (Steve Dyer)
Tue Sep 29 23:14:35 1992
Date: Wed, 30 Sep 1992 01:34:56 GMT
From: dyer@spdcc.com (Steve Dyer)
To: kerberos@shelby.Stanford.EDU
In article <jnm-290992124706@baloo.ctd.ornl.gov> jnm@ornl.gov (Jamey Maze) writes:
>As far as Kerberos implementations, it seems that the OSF/DCE
>implementation would hold the most long term promise. I know many of you on
>this list will disagree, but at this site, the promise of a standard
>Kerberos implementation eventually being bundled with the operating system
>was enough to stifle any major investments in 3rd-party support of MIT
>Kerberos (either V4 or V5).
Well, you're going to have to BUY OSF/DCE, and I think it's going to be
a bundled (read: optional) product from OS vendors for a very long time.
(Just IMHO). I'd expect that any 3rd party KRB5 product would have to
have a way of contacting a KDC through TCP or UDP, and not just DCE RPC,
and in such cases, you should be able to use the freely available MIT
server. I'm excited about the DCE, too, but there's an irresistable
potency about a freely available standard which comes with a equally
freely available implementation which you seem eager to discount.
>AFS is being viewed as clear winner and with it
>being integrated into OSF/DCE, that's another point in its favor.
Huh? AFS is viewed as clear winner to what? It's not at all clear what
you're trying to say here. Plus, what's going to end up in the DCE
file-system wise has some high-level similarities to AFS, but the areas
where it diverges are too many to list. AFS's V4 KDC doesn't resemble
the MIT V4 server, but it doesn't resemble the DCE Registry/Security Server
either.
>Since
>Project Athena's funding in this area appears to have been redirected into
>OSF, it would appear that MIT will not necessarily be taking the lead role
>in on-going development in this area. I'd be interested in hearing
>thoughtful comments on this evaluation. (No flames please.)
How about a more thoughtful evaluation to begin with?
--
Steve Dyer
dyer@ursa-major.spdcc.com aka {ima,harvard,rayssd,linus,m2c}!spdcc!dyer
