[4914] in Kerberos
Kerberos requirements (was Re: SATAN, Dan Farmer, SGI, security, etc.)
daemon@ATHENA.MIT.EDU (Christopher Davis)
Mon Apr 3 11:02:40 1995
To: kerberos@MIT.EDU
Date: 3 Apr 1995 14:48:33 GMT
From: ckd@loiosh.kei.com (Christopher Davis)
[followups reaimed]
MH> == Mark Hays <hays@math.arizona.edu>
MH> Besides, [Kerberos] requires a dedicated key server. This might be a
MH> viable solution for some, but costs $$$. We'd rather use our machines
MH> to *compute*.
Got any Sun3s around? Maybe an old 386? Kerberos KDCs are not *that*
CPU-hungry, after all. A 386 running BSD/OS or FreeBSD or something
should work just fine, and you can probably pick one up for free from
some secretary's desk when it's replaced with a 486 or Pentium. Depending
on your site's upgrade cycle, you may be able to get several of them for
redundancy (slave servers).
If I recall correctly, MIT's KDCs are (or were) MicroVAXen, not exactly
powerhouses, and they use Kerberos pretty heavily last I checked :-)
--
Christopher Davis * <ckd@kei.com> * <URL:http://www.kei.com/homepages/ckd/>
512/03829F89 = D7 C9 A7 80 8C 84 3F B2 27 E1 48 61 BF FC 18 B4
1024/66CB73DD = 46 8E FD F5 12 8E 13 4C 2C 8A 92 A3 B0 D5 2A 5E
[ Public keys available by finger, WWW, or keyserver ]
