[7111] in Kerberos
Re: Dial-In Servers and Kerberos
daemon@ATHENA.MIT.EDU (HARRY R. ERWIN)
Wed Apr 17 14:35:14 1996
Date: Wed, 17 Apr 1996 12:35:23 -0400 (EDT)
From: "HARRY R. ERWIN" <herwin@osf1.gmu.edu>
To: Darren Reed <darrenr@cyber.com.au>
Cc: kerberos@MIT.EDU
In-Reply-To: <199604171323.XAA01924@plum.cyber.com.au>
On Wed, 17 Apr 1996, Darren Reed wrote:
> In some mail I received from Sam Hartman, sie wrote
> >
> > So, the answer is somewhat complicated. If you are looking at
> > terminal servers that can work in a Kerberos environment, the answer
> > is that yes, several exist. If you look to find terminal servers that
> > meet the Kerberos security model, I am not aware of any.
>
> It is, however, relatively easy to do kerberos over the a tty dialin, all
> you need to do is work out how your dialin `thing' is going to send
> Kerberos `packets' to your KDC.
>
I know unencrypted dial-up access to a kerberized system means I'm already
damned. So it goes. Unfortunately, I've been given OpenVision Kerberos 5
running on a SPARC 5 and a second SPARC 5 running Solaris 2.4/5 and a 3Com
Access Control Server, and told to work it out. The 3Com stuff works with
OSF DCE and needs an HP server to do that.
Harry Erwin, Internet: herwin@gmu.edu, Web Page: http://osf1.gmu.edu/~herwin
PhD student in computational neurosci and lecturer for CS 211 (advanced C++)