Received: from PACIFIC-CARRIER-ANNEX.MIT.EDU by po7.MIT.EDU (5.61/4.7) id AA13945; Wed, 27 Dec 95 14:17:08 EST Received: from news.ti.com by MIT.EDU with SMTP id AA10198; Wed, 27 Dec 95 14:16:50 EST Received: from pan.mc.ti.com ([157.87.0.1]) by gate.ti.com (8.6.12/) with SMTP id NAA26141 for ; Wed, 27 Dec 1995 13:16:52 -0600 Received: by pan.mc.ti.com (5.57/Ultrix3.0-C) id AA04885; Wed, 27 Dec 95 14:16:19 -0500 Date: Wed, 27 Dec 95 14:16:19 -0500 From: MAILER-DAEMON@pan.mc.ti.com (Mail Delivery Subsystem) Subject: Returned mail: Cannot send message for 3 days Message-Id: <9512271916.AA04885@pan.mc.ti.com> To: ----- Transcript of session follows ----- 421 brahma.mc.ti.com.tcp... Deferred: Connection timed out during user open with brahma.mc.ti.com ----- Unsent message follows ----- Received: by pan.mc.ti.com (5.57/Ultrix3.0-C) id AA00442; Sun, 24 Dec 95 14:10:29 -0500 Received: by ganesh.mc.ti.com; id AA04837; Sun, 24 Dec 1995 14:10:28 -0500 Received: by ganesh.mc.ti.com; id AA04828; Sun, 24 Dec 1995 14:10:24 -0500 Received: from dragon.ti.com (ti.com [192.94.94.61]) by robin.itg.ti.com (8.6.12/8.6.11) with ESMTP id HAA18585 for ; Sun, 24 Dec 1995 07:34:57 -0600 Received: from MIT.EDU (SOUTH-STATION-ANNEX.MIT.EDU [18.72.1.2]) by dragon.ti.com (8.6.12/) with SMTP id HAA25619 for ; Sun, 24 Dec 1995 07:42:13 -0600 Received: from pad-thai.cam.ov.com by MIT.EDU with SMTP id AA14610; Sun, 24 Dec 95 08:22:30 EST Received: by pad-thai.cam.ov.com (8.6.12/) id ; Sun, 24 Dec 1995 08:25:31 -0500 Received: from GATEWAY by pad-thai.cam.ov.com with netnews for kerberos-wrapper@cam.ov.com (kerberos@mit.edu) X-Ph: V5.0@ganesh.mc.ti.com To: kerberos@MIT.EDU Date: 24 Dec 1995 04:30:07 -0500 From: tls@rek.tjls.com (Thor Lancelot Simon) Message-Id: <4bj6iv$2d3@fearsome.tjls.com> Organization: Never! Sender: usenet@cam.ov.com References: , <199512240320.WAA13253@toxicwaste.media.mit.edu> Subject: Re: Thinking of moving to kerberos, lots of questions In article <199512240320.WAA13253@toxicwaste.media.mit.edu>, Derek Atkins wrote: >> drat. I was afraid of that. Any sources out there that I can use? > >When I was a summer intern at Bellcore a few years ago I wrote one. >But I don't have the source anymore. Basically, what you do is take a >login that understands both kerberos and YP, hack it up a little to do >the appropriate checks, and then add some of the kadmin "ank" code to >add a new key to the database. > >Alternatively, you can provide a user-space program that does the same >thing -- ask a user for a password, compare it to the passwd entry in >YP, and then add the password to kerberos. This, too, would be fairly >simple to write but I don't have code for you... > >Perhaps someone else has code to share? Berkeley's "register" client and server did this. Unfortunately they aren't really compatible with kadmin; you'd have to run a separate kadmind and registerd, and modify your kdb_init to create the keys register wants to use. But if you want to look at the source, it's in the domestic 4.4Lite distribution. -- Thor Lancelot Simon tls@rek.tjls.com Where is the day that melted into one rich noise? --Thomas Wolfe