[5447] in Kerberos
Re: kerberized rdist-list program?
daemon@ATHENA.MIT.EDU (Rob McNicholas)
Fri Jun 30 17:33:05 1995
To: kerberos@MIT.EDU
Date: 30 Jun 1995 21:19:51 GMT
From: robm@diva.EECS.Berkeley.EDU (Rob McNicholas)
We use nrdist (v. 6.1.3) to do a kerberized (kerberosIV) rdist. You
can use "ksrvtgt" to get a short-lived ticket at the start of the
session.
-rob
Newsgroups: comp.protocols.kerberos
Date: 30 Jun 1995 15:02:18 -0400
References: eichin@cygnus.com (Mark W. Eichin)
For reference, rdist-7.1.0 actually uses rsh underneath, so it is
trivial to use it with kerberos rsh. I don't know what "sup" uses
(though I've heard rumors of a kerberized version) and it pulls rather
than pushes, but that's what the NetBSD developers use (and the Mach
developers as well, or at least they used to.)
The hard part is the higher level "figure out how to synchronize", the
transport is easy, in comparsion...
_Mark_ <eichin@cygnus.com>
Cygnus Support
Cygnus Network Security <network-security@cygnus.com>
http://www.cygnus.com/data/cns/
Date: Fri, 30 Jun 1995 08:16:31 -1000
From: pst@cisco.com (Paul Traina)
I'm in need of some code that will do an authenticated and optionally
encrypted push of data from one machine to another. I don't care if it is
rdist based (well, I'd prefer it not to be, given the race conditions in
classic rdist) but that's basicly the functionality I need.
The idea here is that I need to mirror a bunch of secondary servers off of
a primary server across known evil networks.
--
Rob McNicholas Technical & Computing Services, EE/CS, U.C. Berkeley
robm@eecs.berkeley.edu Voice: 510/642-8633 FAX: 510/643-7846