[818] in Kerberos_V5_Development
[George.Seweryniak@mailgw.er.doe.gov: Re: ESnet Authentication Pilot Milestone Reached!]
daemon@ATHENA.MIT.EDU (Theodore Ts'o)
Fri Jul 15 12:16:32 1994
Date: Fri, 15 Jul 94 12:15:49 EDT
From: tytso@MIT.EDU (Theodore Ts'o)
To: krbdev@MIT.EDU
FYI....
------- Forwarded Message
From: George.Seweryniak@mailgw.er.doe.gov
Date: 14 Jul 94 07:40:00 -0400
To: escc@es.net, gr_johnson@gate.pnl.gov
Cc: auth-pilot@es.net
Subject: Re: ESnet Authentication Pilot Milestone Reached!
Great job.
I have put this accomplishment in the weekly DOE HQ report.
______________________________ Reply Separator
_________________________________
Subject: ESnet Authentication Pilot Milestone Reached!
Author: gr_johnson@gate.pnl.gov_at_internet at X400PO
Date: 7/12/94 7:37 AM
Mime-Version: 1.0
Content-Transfer-Encoding: 7BIT
ESCC Members:
A significant milestone was reached this week by the ESnet
Authentication Pilot project. As I reported at the ESCC meeting last
February, the project team had been struggling trying to get Kerberos
inter-realm (i.e., inter-site) authentication to function. In March,
Doug Engert (ANL) was able to get inter-realm authentication to
function in a test environment he set up at his site. Since then, Doug
and Chuck Athey (LLNL) have worked with the MIT Kerberos developers to
resolve many of the software problems (partly contributing to a new
release of the Kerberos V5 beta code) and protocol issues.
Yesterday, Doug and Chuck successfully logged into one another's
systems across ESnet using the Kerberos V5 protocol. After
authenticating to their local KDC, they were able to securely telnet
to one another's system without any other kind of authentication. No
cleartext passwords crossed their local networks or the internet.
Inter-realm authentication was mediated by an ESnet 'root' Key
Distribution Center (KDC) established by Joe Ramos (NERSC).
Congratulations Doug, Chuck, and Joe!
Jerry
------- End Forwarded Message
