[3235] in Kerberos
Re: Help / Docs on Kerberizing
daemon@ATHENA.MIT.EDU (michael shiplett)
Thu May 5 12:16:27 1994
To: kerberos@MIT.EDU
Date: 05 May 1994 14:10:36 GMT
From: walrus@enchanter.ifs.umich.edu (michael shiplett)
Reply-To: michael.shiplett@umich.edu
"jl" == Jason Larke <jlarke@css.itd.umich.edu> writes:
jl> I'm an admin on a small network of RS-6k's using AFS Kerberos for
jl> authentication. Several of my users have asked for a POP server.
jl> I found an MIT-kerberized version of popper, and I've read the
jl> FAQ which describes the differences between AFS and MIT Kerberos,
jl> but I haven't found much (any) description of the actual function
jl> calls.
Check the section 3 man pages supplied with kerberos for the kerberos
calls. The ticket-acquisition calls will work in an AFS environment.
/afs/grand.central.org/doc/afs/specs/progint/asrv/asrv-ispec.* are the dvi and
ps versions of the _AFS Programmer's Reference: Authentication Server
Interface_.
jl> Is there a "Kerberizing FAQ" or other doc that explains what is
jl> needed to kerberize an application, or convert it from MIT to AFS
jl> Kerberos?
Most applications will work if you link them with a copy of libdes.a
that uses the AFS string-to-key function. Password changing programs
are the most troublesome.
jl> (If anyone knows of an AFS Kerberized POP server, that would be
jl> good to. :) )
The popd in MH 6.8.x may work for you. I'm not sure as I (thankfully)
haven't had to deal with the server side of our mail environment.
The sources to the kerberized popper and zcomsat used by our mailserver may
be found in /afs/umich.edu/group/itd/ftp/sysadm/mail (unfortunately I don't
know of a machine which allows anonymous FTP into AFS around here).
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
From the README in the aformentioned directory:
The files in this directory are supplied "as is" with no warranty
or support of any sort. Use at own risk.
kpop-1.831.tar.Z A kerberized version of ucb's popper-1.831.
zcomsat.tar.Z A replacement for 'comsat" that listens for
the strange messages sendmail (actually, binmail)
sends out, and posts zephyrgrams.
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
