[3173] in Kerberos
Re: Appreciate any contact information
daemon@ATHENA.MIT.EDU (Ganesan)
Mon Apr 25 08:50:26 1994
From: bf4grjc@socrates.MIT.EDU (Ganesan)
To: kasturi@vu-vlsi.ee.vill.edu (Srinivasa M. Kasturi - EE8460 Spring 1991)
Date: Mon, 25 Apr 1994 08:31:35 -0500 (EDT)
Cc: kerberos@MIT.EDU, kasturi@MIT.EDU
In-Reply-To: <9404221929.AA16973@vu-vlsi.ee.vill.edu> from "Srinivasa M. Kasturi - EE8460 Spring 1991" at Apr 22, 94 03:29:17 pm
Reply-To: Ravi.Ganesan@bell-atl.com
> Hi Folks,
>
> I am in kinda sticky position in "selling" kerberos to my Bosses and
> Clients. Sort of hung up on what it takes to Administer and Manage a
> Sizable network (any where from ~10,000 to an order more). MIT
> is the largest net I know of. Infact to think of say DCEing a large
1) Administration ought to be your biggest selling point really. What
other non proprietary tool allows you to centrally manage login-passwords
for 10,000 users in a heterogeneous environment? Calculate the cost
saved in administering the 100 or so separate /etc/passwd type constructs
you are probably managing, and weigh this against the cost of managing it
centrally.
2) Many users today are faced with multiple sign-ons, a hangover from the
days when each MVS system had its on authentication front-end. "Single-
logon" is often a major requirement for such users - you can use Kerberos
to achieve this.
SO having saved administration costs, and met user requirements, you might
add that it kind of increases your security too!
Ravi
--
*******************************************************************************
Ravi Ganesan e-mail: Ravi.Ganesan@Bell-Atl.Com
Manager, Center of Excellence v-mail: (301) 236-7583
for Electronic Commerce
Bell Atlantic
******************************************************************************
