[7789] in Kerberos
Re: Mundane kerberos question: srvtab management
daemon@ATHENA.MIT.EDU (Gary Gaskell)
Thu Aug 15 19:45:33 1996
To: kerberos@MIT.EDU
Date: 15 Aug 1996 22:40:49 GMT
From: gaga@celsius.oz.au (Gary Gaskell)
Randall S. Winchester (rsw@Glue.umd.edu) wrote:
: On Wed, 14 Aug 1996, Ken Hornstein wrote:
: :
: : And as a site note, how many people _really_ use a floppy/tape drive/whatever
: : to send the srvtab to various machines, and how many people just ftp it
: : over in the clear? I know that the stuff in the srvtabs should never go
: : in the clear, but since you only do it once ...
: :
: : --Ken
: :
: Then of course the one part people often forget is that when the go and
: remotely backup / on their systems it goes across in the clear again, and
: again, and again.... (This should be documented!)
: I seldom if ever backup / on any of my machines, but I had to come up with a
: bunch of global configuration management tools so I would know what differs
: when a disk fails.
: Randall
Backing up / gets everything, but I guess it is the key files in /etc
that are the issue, and (not being a sys admin) I expect people want
to backup /etc, so they can restore the system image, if need be, or
they just use it to copy to a new box as part of their company
standard config.
If you mention the security issues of backup, then also remember
rdist traffic in the clear.
BTW, not everyone forgets this, as I've heard of a few people hacking up
a secure backup service. The research centre where I used to work
generated an ftp service for DCE that uses DCE's confidentiality calls.
--
regards,
Gary Gaskell
Security Software Engineer
CelsiusTech Australia
