[2393] in Kerberos

home help back first fref pref prev next nref lref last post

Re: Kerberos V5 Questions (not in FAQ)

daemon@ATHENA.MIT.EDU (Steve Lunt)
Tue Nov 24 18:07:33 1992

Date: Tue, 24 Nov 92 17:43:31 EST
From: Steve Lunt <lunt@ctt.bellcore.com>
To: jennie+@cs.cmu.edu
Cc: kerberos@Athena.MIT.EDU

Jennifer,

> 1) How fast can the TGS hand out tickets, and on what architecture is
> that number based on?

	The answer is really fast.  You are not likely to see any
	impact on the performance of your application due to Kerberos
	ticket fetching.  A slave servers can be set up, but their
	mostly used in case the master is down or otherwise
	unavailable.

> 2) Can anyone tell me how I can get a copy of the following document
> from the FAQ:
>   [8] C. Neumann and J. Kohl, "The Kerberos(tm) Network Authentication
>   Service (V5)," April 1992.  Currently released as an Internet Draft.

	Via anonymous ftp from nnsc.nsf.net in
	internet-drafts/draft-ietf-cat-kerberos-01.ps:

	Internet-Drafts are available by anonymous FTP.  Login with the	
	username "anonymous" and password "guest".  After logging in,
	Type "cd internet-drafts".
	     "get draft-ietf-cat-kerberos-01.ps".
	 
	Internet-Drafts directories are located at:	
		                                                
	     o  East Coast (US)                          
	        Address:  nnsc.nsf.net (128.89.1.178)	
		                                                
	     o  West Coast (US)                          
	        Address:  ftp.nisc.sri.com (192.33.33.22)
								
	     o  Pacific Rim                              
	        Address:  munnari.oz.au (128.250.1.21)	
		                                                
	     o  Europe                                   
	        Address:  nic.nordu.net (192.36.148.17)	
		                                                
	Internet-Drafts are also available by mail.	
		                                                
	Send a message to:  mail-server@nisc.sri.com. In the body type: 
	     "SEND draft-ietf-cat-kerberos-01.ps".
								
	For questions, please mail to internet-drafts@cnri.reston.va.us.

> 3) Is there anything stopping a client from asking for two tickets for
> the same service when it's not necessary?

	Not clear what you mean, but for example if you rlogin into
	host A, log out, then rlogin to host A again, you will again
	fetch a ticket for host A even though you already possess
	one.  However, this is not a problem.

I'll defer on the other questions...

-- Steve

Steven J. Lunt                     Bellcore
Information Technology Security    RRC 1L-213
lunt@bellcore.com                  444 Hoes Lane
(908) 699-4244                     Piscataway, NJ 08854

home help back first fref pref prev next nref lref last post