[4512] in Kerberos
Re: Seeking information on DCE Kerberos
daemon@ATHENA.MIT.EDU (Rich Salz)
Sat Jan 21 09:16:18 1995
To: kerberos@MIT.EDU
Date: 21 Jan 1995 12:46:31 GMT
From: rsalz@osf.org (Rich Salz)
In <3fp6oo$3tb@netnews.upenn.edu> hcheng@blue.seas.upenn.edu (Howard Cheng) writes:
> but I would like some more information on DCE
>Kerberos. I would like to do a low-level comparison if possible,
A low-level comparison will be pretty boring -- a "diff" of many of the
files would be empty. :-)
DCE uses MIT Kerberos V5 source code. Because of the difference in release
cycles (and methodologies), the DCE sources aren't synced up with the latest
version of all the MIT source. DCE may also have some bug-fixes that haven't
been sent back to MIT yet. The DCE and MIT Kerberos folks keep in touch.
We'd all like closer cooperation and have been working on it.
DCE uses Kerberos as the implementation of its shared-secret (private-key)
security system. We don't expose the Kerberos API's. The DCE code from
OSF has not been tested so that we guarantee that the DCE security server
can be a drop-in replacement for a KRB5 server, although that is certainly
an obvious goal for us to have.
Hope this helps.
/r$
>without digging through the code.
>
>Can anymore provide me with more information? (I am trying to contact
>the OSF and CyberSafe as well).
>
>Thanks very much.
>
>Howard Cheng
>hcheng@eniac.seas.upenn.edu
