[23793] in Kerberos
Re: Multiple realms
daemon@ATHENA.MIT.EDU (Thomas Bolioli)
Thu Apr 28 14:47:34 2005
Message-ID: <42712F80.6000901@terranovum.com>
Date: Thu, 28 Apr 2005 14:46:24 -0400
From: Thomas Bolioli <tpblists@terranovum.com>
MIME-Version: 1.0
To: Kenneth Grady <klg@lanl.gov>, Mailing List Kerberos <kerberos@mit.edu>
In-Reply-To: <1114696964.3785.71.camel@grady.lanl.gov>
Content-Type: multipart/mixed; boundary="===============73851400138775158=="
Errors-To: kerberos-bounces@mit.edu
This is a cryptographically signed message in MIME format.
--===============73851400138775158==
Content-Type: multipart/signed; protocol="application/x-pkcs7-signature";
micalg=sha1; boundary="------------ms010800080704010806040203"
This is a cryptographically signed message in MIME format.
--------------ms010800080704010806040203
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
So I have to do this everytime I add a realm in?
Tom
Kenneth Grady wrote:
>You can have multiple realms on the same KDC. When you start krb5kdc you
>need the "-r realm1 -r realm2" flag. To setup the multiple realms you
>can run krb5_util create for realm1 (see kdc.conf) then krb5_util dump
>realm1.file, krb5_util destroy realm1, modify kdc.conf for realm2,
>krb5_util create realm2, krb5_util load -update realm1.file then you
>will have realm1 and realm2 in one database.
>
>There is a small problem adding entries to realm1 you need to run
>"kadmin.local -r realm1" entries for realm2 can be added with just
>"kadmin.local"
>
>
>On Wed, 2005-04-27 at 14:21, Thomas Bolioli wrote:
>
>
>>Do multiple realms require multiple kdc's and if so, does that mean I
>>will need to have multiple ports open for those if the KDCs all exist on
>>the same machine? I realize I will need to do cross realm with this
>>setup but that should be trivial by setting up the trust in the KDC. Are
>>there any issues with this setup I may be missing?
>>Thanks,
>>Tom
>>
>>______________________________________________________________________
>>________________________________________________
>>Kerberos mailing list Kerberos@mit.edu
>>https://mailman.mit.edu/mailman/listinfo/kerberos
>>
>>
--------------ms010800080704010806040203
Content-Type: application/x-pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature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--------------ms010800080704010806040203--
--===============73851400138775158==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
--===============73851400138775158==--
