[2556] in Kerberos
Re: Help needed with Kerb. procedures
daemon@ATHENA.MIT.EDU (Alan Crosswell)
Fri Feb 5 12:41:05 1993
Date: Fri, 5 Feb 1993 15:24:12 GMT
From: alan@curta.cc.columbia.edu (Alan Crosswell)
To: kerberos@shelby.Stanford.EDU
In article <1ks7t5INN25u@NS1.PeachNet.EDU> Charles Menser
<charles@shadow.peachnet.edu> writes:
> I am running Kerberos to authenticate users on a netblazer.
> However, I am having trouble with how kerberos works.
> If you have a hosts A,B,C and all of them offer the same two
> services X and Y. How do I tell kerberos that Jack can
> use A and C for X and B for Y, and Jill can use A,B,and C
> but only for Y?
>
> BTW - I saw a request for a FAQ, could someone please
> forward a copy to me, if it exists.
>
> Thanks,
> Charles
> -----
> charles@peachnet.edu
Kerberos is an authentication service only. That is, it reliably identifies
principals. Authorization is not a feature that it provides. You need to
do this yourself either in applications, or, for example by hacking the KDC
to only issue service tickets based on some kind of ACL. (This might be
considered a blasphemy however:-)
/a
