[7779] in Kerberos
Re: Mundane kerberos question: srvtab management
daemon@ATHENA.MIT.EDU (Phi H Truong)
Thu Aug 15 11:56:57 1996
To: kerberos@MIT.EDU
Date: 15 Aug 1996 14:51:24 GMT
From: orion@iastate.edu (Phi H Truong)
Reply-To: orion@iastate.edu (Phi H Truong)
In article <tslpw4tlcfs.fsf@tertius.mit.edu>,
Sam Hartman <hartmans@MIT.EDU> wrote:
>>>>>> "Ken" == Ken Hornstein <kenh@cmf.nrl.navy.mil> writes:
>
> Ken> Now that we are increasing the number of hosts that are in
> Ken> our Kerberos realm, one thought comes to mind: the current
> Ken> method for managing srvtabs really bites.
>
>
> I know of one company that has an automatic process to
>generate srvtabs during the installation process for a machine. It
>may require a minimal bit of human interaction to approve the key for
>addition to the database. I don't believe this code is publically
>available.
>
Don't know about company but our client machines got the srvtab with minimal
human intervention. Actually I think I know the company, DEC or rather the
product DECAthena (aka MIT Athena on steroid). Their way required the
master key and admin key which was kind of rediculous when one thought of
setting up lots of machines all over campus. We just entered the machine
into our database (we used moira service, an Athenaism) and user (be it may
professor, grad student, ...etc) plug in the machine, perform remote
installation, answer two or three questions, go get some coffee, come back
in 15 mins and ready to login. Ok, so we are a bit lazy when it comes to
walking around campus.
We ran kerberos IV and recyled our kerberos principles (deletion, creation,
and rename on the fly; simple dbm manipulations). We also modified the
srvtab extraction program to not scan through the entire database searching
for everything related to an instance; when you have 3 Meg of the dump then
searching would take a long while.
--
_____
Phi H. Truong "No wisdom. No enlightenment. Only you."
orion@iastate.edu ISU Computation Center
Systems Analyst 237 Durham Center ph: (515) 294 -1420
<a href="http://www.public.iastate.edu/~orion/">Phi Truong</a>
