[2551] in Kerberos
Re: Help needed with Kerb. procedures
daemon@ATHENA.MIT.EDU (Ruixi Yuan)
Thu Feb 4 19:31:30 1993
Date: Thu, 4 Feb 93 18:13:31 CST
From: yuan@syl.dl.nec.com (Ruixi Yuan)
To: charles@shadow.peachnet.edu
Cc: kerberos@Athena.MIT.EDU
>I am running Kerberos to authenticate users on a netblazer.
>However, I am having trouble with how kerberos works.
>If you have a hosts A,B,C and all of them offer the same two
>services X and Y. How do I tell kerberos that Jack can
>use A and C for X and B for Y, and Jill can use A,B,and C
>but only for Y?
>
>BTW - I saw a request for a FAQ, could someone please
>forward a copy to me, if it exists.
>
>Thanks,
>Charles
>-----
>charles@peachnet.edu
>
This maybe a common problem, because I have also encountered
it when thinking about access control for applications.
Reading through the KRB5 protocol and the source codes,
there is only access list for kadmin, but not for application.
However, it is relatively easy to add a function to the
kerberos library and enable this control function.
--- Ruixi Yuan
yuan@syl.dl.nec.com
