[672] in Zephyr_Bugs
Re: Making non-kerberized zephyr servers talk to eachother
daemon@ATHENA.MIT.EDU (warlord@MIT.EDU)
Tue Aug 1 18:29:10 1995
Date: Tue, 1 Aug 1995 18:29:03 -0400
From: warlord@MIT.EDU
To: Kevin Radke <radke@cpre1.ee.iastate.edu>
Cc: bug-zephyr@MIT.EDU
In-Reply-To: "[671] in Zephyr_Bugs"
There is no way in the current zephyr release to have two sets of
zephyr servers (i.e., two zephyr realms) speak to each other.
Moreover, when that functionality is included in Zephyr 2.1, it will
require both relams to either user kerberos or not use kerberos.
Basically, if your site doesnt use kerberos, then there is no way for
your users to authenticate to the remote realm. The reverse situation
(you are using kerberos but the other site is not) means that you
could theoretically subscribe to messages remotely, but they could not
subscribe back.
The simple anseer to your question is if you want to connect to the
larger site zephyr, you need to use zephyr clients that have
authentication and talk to the site realm. If you want to have a
local realm, then your clients cannot talk to the larger site realm.
Removing authentication checks might solve the problem, but would
leave the large site servers open to attack.
I hope this answers your questions.
-derek
