[6695] in Kerberos

home help back first fref pref prev next nref lref last post

Re: PD Kerberos Implementations

daemon@ATHENA.MIT.EDU (Gary Gaskell)
Mon Feb 19 03:05:17 1996

Date: Mon, 19 Feb 1996 17:47:42 +1000 (EST)
From: Gary Gaskell <gaskell@dstc.edu.au>
To: John Bell <jbell@ga.com.au>
Cc: kerberos@MIT.EDU
In-Reply-To: <4g0o6f$4es@bert.ga.com.au>

On 16 Feb 1996, John Bell wrote:

> Hi All,
> 	Does anyone know of any PD Kerberos implementations other than 
> eBones?  Alternatively, has anyone successfully ported eBones to Unix?
> 
> Regards,
> 
> --
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> John Bell <jbell@ga.com.au> Sanderson Pacific P/L, Melbourne AUSTRALIA
> 
John, 

Sesame V4 is now out.  Within a single domain it's protocols are 
basically according to the Internet RFC 1510, and without a drop of U.S. 
code in the release (so I'm told).

A post about two contained the details on getting Sesame.  At the moment, 
the dist site is in Belgium.

(Also, Sesame adds significant support for Authorisation, whereas with 
vanilla Kerberos, you only have name-based authentication, and it's up to 
you to do a lot of ref monitor stuff (with ACLs), without support for 
groups or roles.  DCE is also a good starting point, but they'll probably 
try to sell you an _EXPORT QUALITY_ version - but watch it, it's crypto 
is not there for confidentiality.)

regards


Gary Gaskell                         Cooperative Research Centre for
Research Scientist                   Distributed Systems Technology
DSTC                                 Ph:      61 7 3864 1051
Level 12, ITE Building               Fax:     61 7 3864 1282
Queensland University of Technology  Email:   gaskell@dstc.edu.au  
Brisbane, Australia.                 Ph (A/H) (07) 3857 7912
                                     Mobile:  (61) 0411 221 946
_________________________________________________________________


home help back first fref pref prev next nref lref last post