[6809] in Kerberos
Re: Auomatic account creation using Kerberos
daemon@ATHENA.MIT.EDU (Sam Hartman)
Sun Mar 3 12:39:08 1996
To: Luiz Carlos Portugal Starling <starling@bis.com.br>
Cc: kerberos@MIT.EDU
From: hartmans@MIT.EDU (Sam Hartman)
Date: 03 Mar 1996 12:21:09 -0500
In-Reply-To: Luiz Carlos Portugal Starling's message of Fri, 01 Mar 1996 12:27:29 -0300
There is no secure way to create an account using Kerberos
alone unless you are an administrator who already shares a secret with
the Kerberos server, or you are at the console of the KDC.
However, by combining Kerberos with some public-key scheme,
you could create an account securely, although authenticating the
remote party may be non-trivial. You can sometimes also just use the
public-key system unless previous or future infrastructure requires
Kerberos.
--Sam
