[7010] in Kerberos
Re: Two realms served by a single daemon
daemon@ATHENA.MIT.EDU (Larry J. Hughes Jr.)
Thu Apr 4 08:03:32 1996
To: kerberos@MIT.EDU
Date: 3 Apr 1996 21:26:56 GMT
From: hughes@bodhi.it.iupui.edu (Larry J. Hughes Jr.)
In article <4juj39$4ji@darkstar.UCSC.EDU>,
James H. Haynes <haynes@cats.ucsc.edu> wrote:
>> We would like to set up a server that would serve two realms.
>>
>You might elaborate on the reasons for wanting to do this. Seems to me the
>reason for having two realms is that neither trusts the Kerberos administrator
>of the other. When they are on the same server it seems like the people
>who run the server have to be trusted by both communities of users.
One big university campus with plenty of staff and hardware
resources, and one smaller sister campus with minimal staff
and hardware resources. Two realms might be desirable, but
there's no real reason why the smaller campus should not
trust the administrator at the larger campus. Except for the
usual political reasons of course. :)
---
Larry J. Hughes, Jr. hughes@indiana.edu
Indiana University http://copper.ucs.indiana.edu/~hughes/
* Author, "Actually Useful Internet Security Techniques," ISBN 1-56205-508-9 *
