[4039] in Kerberos

home help back first fref pref prev next nref lref last post

Re: I need comment on Kerberos vs. NetSP (IBM)

daemon@ATHENA.MIT.EDU (Paul Pomes)
Sat Oct 15 22:43:48 1994

To: kerberos@MIT.EDU
Date: 16 Oct 1994 02:32:23 GMT
From: p-pomes@mirage.cso.uiuc.edu (Paul Pomes)
Reply-To: P-Pomes@uiuc.edu

brian@nothing.ucsd.edu (Brian Kantor) writes:

>We have 300+ lines here, and a user community of well over 13,000
>students/staff/faculty.  Each has his own IP address for SLIP/PPP
>(allocated from a class-B network which we reserved specifically for
>that purpose), which is dynamically assigned to whichever port he dials
>in on at login time.  That IP address is his alone, and is protected by
>a username and password, which are soon to be authenticated by Kerberos.

How long has UCSD had that class B?  From the two I found via whois
(128.54.0.0 & 132.239.0.0), I would say quite some time.

I would argue that a class-B for SLIP/PPP users alone is excessive.
Would such a request from UIUC (not that we plan to do so!) pass muster
by the NIC today?  My guess is probably not.

We use dynamic addressing authenticated by TACACS which hooks to Kerberos.

/pbp
--
Freedom of hiring, firing, or renting to whoever you want for whatever reason
is fundamental.  No one is entitled to special protection from the marketplace.
	--Paul Pomes

home help back first fref pref prev next nref lref last post