[1982] in Moira
moira-krb5
daemon@ATHENA.MIT.EDU (Garry Zacheiss)
Wed Aug 14 17:38:29 2002
Message-Id: <200208142138.RAA16054@brad-majors.mit.edu>
To: moiradev@MIT.EDU, moira-admin@MIT.EDU
Date: Wed, 14 Aug 2002 17:38:27 -0400
From: Garry Zacheiss <zacheiss@MIT.EDU>
I just checked an initial cut of krb5 support for moira into the
moira tree on the moira-krb5 branch. It implements krb5 auth for the
client <-> server connection via a new RPC (mr_krb5_auth), while still
supporting old clients using mr_auth. The database namespace is
unchanged, and is still krb4; krb5 clients have the principal they're
authenticating as converted to a krb4 style string.
This also implements krb5 auth for update_server via the
new AUTH_003 protocol option. This is also backwards compatible (old
dcm/update_tests can talk to new update_servers, and vice versa).
It all seems to work, but I haven't done enough testing yet.
I'm not sending the code here; check out the branch if you care.
Don't expect to see this in production anytime soon; probably
not before IAP.
Garry
