[3702] in Kerberos
Re: help installing kerberos IV
daemon@ATHENA.MIT.EDU (Mark W. Eichin)
Thu Aug 11 17:41:19 1994
Date: Thu, 11 Aug 1994 17:32:07 +0500
From: "Mark W. Eichin" <eichin@MIT.EDU>
To: "Brian M. Dempsey" <CSVBMD@CMUVM.CSV.CMICH.EDU>
Cc: kerberos@MIT.EDU
In-Reply-To: [3698]
> Someone answered my original posting indicating that KERBEROS 4
> will have to be ported to SOLARIS 2.3, and that sure looks like
> the case to me. But SUN provides the client portion of KERBEROS 4
> with Solaris 2.3 (i.e. kinit, kdestroy, library routines, etc.,
I heard that Sun did a port of most of the utilities for Solaris early
on, but the project didn't get enough internal backing for them to
make a product out of it... I've done tests of Solaris kerberized
mount and NFS and determined that they work with a stock KDC, but I
can't speak for their security (though I'm sure others here can...)
In any case, Cygnus did a port of most of V4 to Solaris about 1.5
years ago, I use it the clients and daemons every day (though not a
kadmind or kdc, though they get testing from our newer source trees.)
MIT did a different one, but for obvious reasons (namely, a desire to
get people to move to V5) MIT isn't all that interested in doing
another release.
Solaris was one of the platforms that we provided binaries for in our
Free Network Release of Cygnus Network Security (we *always* provide
sources, of course :-) so you could save yourself a lot of work by
sending email to info@cygnus.com and asking about it, we need written
(faxed) confirmation that you won't export it, and then we can send
you instructions on actually ftp'ing it... We wish we could put it up
for open anonymous ftp -- if you do too, write to your elected
representatives about ditching the ITAR!
>> b). We don't have an established KERBEROS database here and someone posted
>> that KERBEROS 5 patch version 2 was available and tested against
As the person responsible for the Solaris code -- it builds, and much
of it will probably work. However, I would not recommend the use of
this code in production unless you have the resources to do bug fixing
(and if you do, great, please send in patches!) The V4 code is however
tested, stable (some would say moribund :-) and might be a better
choice for "out of the box" use.
_Mark_ <eichin@athena.mit.edu>
MIT Student Information Processing Board
Cygnus Support <eichin@cygnus.com>
