[3356] in Kerberos

home help back first fref pref prev next nref lref last post

Re: Kerberos on Solaris 2.3

daemon@ATHENA.MIT.EDU (Tony Melvin)
Wed Jun 1 09:48:39 1994

From: Tony Melvin <tony@sodalia.it>
To: ccslsn@midge.bath.ac.uk
Date: Wed, 1 Jun 94 15:06:23 METDST"
Cc: kerberos@MIT.EDU
In-Reply-To: <Pine.3.89.9406011048.A6371-0100000@midge.bath.ac.uk>; from "Lyn Norris" at Jun 1, 94 10:21 am

> 
> 
> 
> At Bath University, we run Kerberos version 4 in an attempt to prevent 
> unauthorised use of our computers. We would like to acquire version 5, 
> particularly as we plan to upgrade to Solaris 2.3, but we are unsure how 
> to obtain a legal copy.
> We believe that as the product uses encryption technology, we would need 
> an export licence. We acquired version 4 from Australia, thus avoiding 
> the need last time. Is there a way we can legally acquire version 5?
> 
> 
> Lyn Norris
> 
> Computer Services Manager
> 
> 
You are right in believing that an export licence is necessary. We have
come up with a few approaches to resolving this issue:
(1) obtain an export licence for a stripped-down version of Krb5 without data
encryption, then put it back together again with non-US data encryption 
library calls. Getting the export licence shouldn't be all that difficult, but
I suppose that you'll need a US company to do it on your behalf, since it's to
be exported.
(2) pay for someone else to do the above by buying Kerberos from them. This
way you also get product support and a nice admin. GUI etc. OSSG, now called 
CyberSAFE, and other companys offers this.
(3) find someone who has done (1) above and is willing to give/sell it to you,
we didn't find anybody.

Incidently, you'll find quite a few Kerberos v5 lying around that you can get
by anonymous ftp in Europe. It's doubtful as to whether they were obtained by
one of the approaches described above.

Good luck

Tony Melvin (tony@sodalia.it)

home help back first fref pref prev next nref lref last post