[588] in Info-AFS_Redistribution
Re: Changing cell names
daemon@ATHENA.MIT.EDU (Richard Basch)
Mon Feb 10 12:55:19 1992
Date: Mon, 10 Feb 92 12:05:36 -0500
To: rsw@eng.umd.edu (Randall Winchester)
Cc: jm36+@andrew.cmu.edu, d3f082@maddog.pnl.gov, ta_harper@pnlg.pnl.gov
Cc: info-afs@transarc.com
In-Reply-To: Randall Winchester's message of Mon, 10 Feb 92 10:08:56 -0500,
From: "Richard Basch" <basch@MIT.EDU>
The difference is that all you need is the "string-to-key" of the
password, and that is something that administrators of a realm would
have access to. If the string-to-key function is also a function based
on the realm, then the database keys cannot be used by one administrator
to try to compromise a user's account in another realm, assuming they
used the same password.
The key here is that the clear-text password is NOT necessary.
-Richard
