[945] in Kerberos
Re: On porting Kerberos...
daemon@ATHENA.MIT.EDU (Henry Mensch)
Thu May 17 22:36:44 1990
From: Henry Mensch <henry@MIT.EDU>
To: davecb@NEXUS.YORKU.CA
Cc: kerberos@ATHENA.MIT.EDU
In-Reply-To: Your message of 10 May 90 11:51:06 +0000.
Date: Thu, 17 May 90 21:50:07 EDT
> I once had thoughts of taking an 8mm tape down to MIT and asking for
> a snapshot of a running client machine, so that I'd have at least one
> known, working configuration to help answer questions about how various
> things reall worked, as opposed to were supposed to work.
> I dropped it when I realized the sheer complexity of their supporting
> environment: I wouldn't be able to test it against {\it anything} because
> I'd have to simulate {\it everything}.
nobody says you have to do it all at once. start by building the
kerberos server on the platform of your choice, and then experiment
with kerberized clients. you don't have to run a hesiod server, and a
zephyr server, and ... until you're comfortable with the way your
kerberos clients run in your environment.
> However, unpriveleged access to a running system via xterm (or telnet)
> might still be a very usefull thing, since that machine really would be
> part of athena and would server as a real-world example...
>
> I wonder if that sounds as useful to the denizens of Athena?
on one hand, it may well be useful to those who want to try out the
athena environment from afar. on the other hand, it is important to
remember that we are primarily an educational computing facility; we
have a demonstration facility on campus for those who want to see
Kerberos (and our other network services, applications, courseware,
etc.) in action, and we try to provide opportunities to use our
software several times a year at off-campus conferences and
demonstrations. it would be imprudent (for a variety of reasons; use
your imagination) for us to provide unprivileged, uncontrolled access
to systems here at MIT.
-- Henry Mensch / <henry@MIT.EDU>
-- Project Athena External Relations