[6808] in Kerberos

home help back first fref pref prev next nref lref last post

Re: kerberized ftp?

daemon@ATHENA.MIT.EDU (Sam Hartman)
Sun Mar 3 12:24:02 1996

To: John McPhail <jmcphail@kcsun3.kcstar.com>
Cc: kerberos@MIT.EDU
From: hartmans@MIT.EDU (Sam Hartman)
Date: 03 Mar 1996 12:16:48 -0500
In-Reply-To: John McPhail's message of Sun, 03 Mar 1996 09:14:00 -0600

>>>>> "John" == John McPhail <jmcphail@kcsun3.kcstar.com> writes:

    John> Can anyone tell me where I can find a kerberos-compliant ftp
    John> client and daemon (source preferred)?  I looked through the
    John> FAQ, and spent about an hour searching on the web, but no
    John> luck.

	Newer versions of Cygnus Network Security include a Kerberos4
ftp client and daemon.  In addition, the next release of MIT Kerberos5
will include a GSS-API ftp server and client.  Several vendors already
sell similar products.


    John> I have another question. Once I have Kerberos running, will
    John> standard clients be able to connect with my hosts?  My
    John> impression is that standard clients connect with standard
    John> daemons on standard ports, while kerberized clients connect
    John> with kerberos daemons on special ports. Uhmmm, I may be
    John> wrong here. <g>

	You can set it up that way, although remember that the reason
Kerberos is useful is that it provides better security than standard
clients; for some system/security policy combinations leaving standard
clients enabled is a serious problem.

    John> Any help appreciated.

    John> --John McPhail ( jmcphail@kcstar.com )


home help back first fref pref prev next nref lref last post