[4433] in Kerberos

home help back first fref pref prev next nref lref last post

Re: Kerberos V5 under OSF/1 V3?

daemon@ATHENA.MIT.EDU (Joe Ramus)
Wed Jan 4 19:56:03 1995

Date: Wed, 4 Jan 95 16:47:55 PST
From: ramus@nersc.gov (Joe Ramus)
To: kerberos@MIT.EDU, bbutton@netcom.com

>> 
>> I have a bunch of Alpha workstations that I want to run kerberos on,
>> but they are running OSF/1 V2.x. According to DEC, any version of
>> kerberos supported through them will require OSF/1 V3.x. Will the
>> vanilla kerberos 5b4 distribution from MIT build on this hardware
>> under OSF/1 V2.x? I'd love to try it myself, but I can't load the
>> software onto the Alphas without it being approved by the sysadmin
>> security folks.
>> 
>> Brian Button	email: 	bbutton@netcom.com, bbutton@hti.net
>> Houston, TX

If you buy Kerberos V5 from DEC, you should make sure it is
really what you expected.  For example, I heard that DEC removed
the ability to Encrypt your own message packets.  This will allow
them to sell the product outside the US.

You will need to do something different if you want to have a client
& server that communicate with Encrypted messages.  It also means
that you could have Interoperability problems if someone builds
their half of a client/server with the MIT code and you build with
the DEC code.   Again, Encryption will fail.

I could be wrong about the DEC product.
The real point is to make sure that any Kerberos product will
really provide the capabilities you need.

----------------------------------------------------------------
| Joe Ramus  NERSC Livermore  (510) 423-8917   ramus@nersc.gov |
----------------------------------------------------------------

home help back first fref pref prev next nref lref last post