[4818] in Kerberos

home help back first fref pref prev next nref lref last post

Re: where to store kerberos5 binaries

daemon@ATHENA.MIT.EDU (Joe Ramus)
Wed Mar 15 21:01:43 1995

Date: Wed, 15 Mar 95 17:53:47 PST
From: ramus@nersc.gov (Joe Ramus)
To: kerberos@MIT.EDU, verber@parc.xerox.com

>> Date: 14 Mar 1995 19:14:34 GMT
>> From: verber@parc.xerox.com (Mark Verber)
>> Organization: Xerox Palo Alto Research Center, CA, USA
>> 
>> Many sites seem to store their Kerberized clients and servers on the
>> local workstation, for example in a /krb5 directory tree.  Is anyonen
>> keeping this tree in AFS space (marked world readable) rather than on
>> the local machine?  This would simplify updates and should be a bit
>> more secure than having the binaries on the local machine.  Other
>> than AFS being unavailable making it impossible to authentication, has
>> anyone had problems keeping the binaries in AFS space?
>> 
>> --Mark

I put the Kerberos files in AFS.

But I have local files for servers related to login such as
telnetd, rlogind, login.krb5, etc.   I want to be able to login
to a system even if AFS is down.

I have symbolic links in /krb5 something like this:

  /krb5/admin ->   /afs/mycell/k5.4.2/admin
  /krb5/bin ->     /afs/mycell/k5.4.2/bin
  /krb5/include -> /afs/mycell/k5.4.2/include
  /krb5/lib ->     /afs/mycell/k5.4.2/lib
  /krb5/man ->     /afs/mycell/k5.4.2/man
  /krb5/sbin ->    /afs/mycell/k5.4.2/sbin

----------------------------------------------------------------
| Joe Ramus  NERSC Livermore  (510) 423-8917   ramus@nersc.gov |
----------------------------------------------------------------

home help back first fref pref prev next nref lref last post