[6695] in Kerberos
Re: PD Kerberos Implementations
daemon@ATHENA.MIT.EDU (Gary Gaskell)
Mon Feb 19 03:05:17 1996
Date: Mon, 19 Feb 1996 17:47:42 +1000 (EST)
From: Gary Gaskell <gaskell@dstc.edu.au>
To: John Bell <jbell@ga.com.au>
Cc: kerberos@MIT.EDU
In-Reply-To: <4g0o6f$4es@bert.ga.com.au>
On 16 Feb 1996, John Bell wrote:
> Hi All,
> Does anyone know of any PD Kerberos implementations other than
> eBones? Alternatively, has anyone successfully ported eBones to Unix?
>
> Regards,
>
> --
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> John Bell <jbell@ga.com.au> Sanderson Pacific P/L, Melbourne AUSTRALIA
>
John,
Sesame V4 is now out. Within a single domain it's protocols are
basically according to the Internet RFC 1510, and without a drop of U.S.
code in the release (so I'm told).
A post about two contained the details on getting Sesame. At the moment,
the dist site is in Belgium.
(Also, Sesame adds significant support for Authorisation, whereas with
vanilla Kerberos, you only have name-based authentication, and it's up to
you to do a lot of ref monitor stuff (with ACLs), without support for
groups or roles. DCE is also a good starting point, but they'll probably
try to sell you an _EXPORT QUALITY_ version - but watch it, it's crypto
is not there for confidentiality.)
regards
Gary Gaskell Cooperative Research Centre for
Research Scientist Distributed Systems Technology
DSTC Ph: 61 7 3864 1051
Level 12, ITE Building Fax: 61 7 3864 1282
Queensland University of Technology Email: gaskell@dstc.edu.au
Brisbane, Australia. Ph (A/H) (07) 3857 7912
Mobile: (61) 0411 221 946
_________________________________________________________________