[4412] in Kerberos

home help back first fref pref prev next nref lref last post

Re: Interested in PowerPC for Linux / FreeBSD / NetBSD?

daemon@ATHENA.MIT.EDU (Peter da Silva)
Sat Dec 31 09:44:37 1994

To: kerberos@MIT.EDU
Date: Sat, 31 Dec 1994 14:08:04 GMT
From: peter@bonkers.taronga.com (Peter da Silva)

In article <SCHWARTZ.94Dec31002050@galapagos.cse.psu.edu>,
Scott Schwartz <schwartz@galapagos.cse.psu.edu> wrote:
>Huh?  I'm proposing that they use a straightforward, reliable, system
>proven by years of experience and slated to become an internet
>standard, in order to reliably, safely, and securely share filesystems
>between their computers.

I'm sure that Kerberos is reliable and proven by experience and all that,
but straightforward it is *not*.

I suspect it's a documentation problem. All the Kerberos documentation seems
to assume that you have a working Kerberos environment already, or at least
that you've used one in the past so you know what it's all supposed to look
like.

If you were to publish (or point people to, if it's already been published)
a "cookbook for setting up Kerberos IV on your system" (Yes, IV, 'cos that's
the one that's shipping with the various BSDs) it would resolve a hell of a
lot of the opposition to Kerberos.

(On BSDI, if you take the system as default installed, and it's got a default
 route pointing through a PPP or SLIP link, and that link's down, attempting to
 login causes about a 90 second delay followed by a kerberos error message...

 Why? I don't know. Maybe I broke something installing the TIS firewall
 stuff? Maybe when we get through playing OSF/1 release musical chairs for
 a while I'll look into it...)

I would love to be able to take advantage of Kerberos, but getting it set up
is not a priority at work right now, and the documentation, as I said, has a
large amount of double-dutch in it...

home help back first fref pref prev next nref lref last post