[12760] in Athena Bugs
Re: BRAIN.MIT.EDU
daemon@ATHENA.MIT.EDU (Theodore Ts'o)
Tue Oct 18 14:55:00 1994
Date: Tue, 18 Oct 1994 14:54:36 +0500
From: Theodore Ts'o <tytso@MIT.EDU>
To: douzzer@ai.mit.edu, kerberos-request@MIT.EDU, bugs@MIT.EDU
Cc: tlyu@MIT.EDU, probe@MIT.EDU
In-Reply-To: Tom Yu's message of Mon, 17 Oct 94 18:45:53 -0400,
<9410172245.AA12580@lockpick.MIT.EDU>
Dan,
I would strongly suggest that instead of using the BRAIN.MIT.EDU
kerberos realm, that you instead set up your AFS cell to use the
ATHENA.MIT.EDU kerberos realm for its authentication.
MIT has been gradually moving to a single namespace for
usernames, and the reenginerring efforts at MIT are merely accelerating
this trend. Setting up another Kerberos realm is a step in the wrong
direction.
There are a lot of advantages towards using the ATHENA.MIT.EDU
kerberos realm. Your users won't have to remember two different
passwords. In addition, a common username space significantly reduces
the confusion factor of users as well. Furthermore, you don't have to
adminster another Kerberos cell, and be available to fix user's
passwords when they forget them. All of that work can be done by the
Athena accounts consultants.
The SIPB.MIT.EDU, LEES.MIT.EDU, and the MEDIA-LAB.MIT.EDU afs
cells all use the ATHENA.MIT.EDU Kerberos realm. I suggest that you
change the brain.mit.edu afs cell to use the ATHENA.MIT.EDU realm. If
you need help doing this, we can provide you with advice about what you
need to do in order to do this.
- Ted
