Return-Path: Received: from central-city-carrier-station.mit.edu by po11.mit.edu (8.9.2/4.7) id SAA12364; Sun, 28 Oct 2001 18:00:32 -0500 (EST) From: Received: from manawatu-mail-centre.mit.edu (MANAWATU-MAIL-CENTRE.MIT.EDU [18.7.21.85]) by central-city-carrier-station.mit.edu (8.9.2/8.9.2) with ESMTP id SAA14380; Sun, 28 Oct 2001 18:00:27 -0500 (EST) Received: from m56-129-29.mit.edu (M56-129-29.MIT.EDU [18.56.0.59]) by manawatu-mail-centre.mit.edu (8.9.2/8.9.2) with ESMTP id SAA29494; Sun, 28 Oct 2001 18:00:25 -0500 (EST) Received: (from yak@localhost) by m56-129-29.mit.edu (8.9.3) id SAA02684; Sun, 28 Oct 2001 18:00:26 -0500 Date: Sun, 28 Oct 2001 18:00:26 -0500 To: "Paul T. Pham" Cc: sipb@MIT.EDU Subject: Re: Kerberos-authenticated services Message-ID: <20011028180026.A2426@m56-129-29.mit.edu> References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.3.23i > I am interested in running Kerberos-authenticated services on my private > server, specifically login, https, and cvs. Does I/S provide keytabs for > this purpose, and if so, whom should I contact to request these? https cannot use kerberos except in very weird circumstances, so getting a keytab will not help. For login, you can request a "host" keytab from accounts@mit.edu. Remote cvs is normally run over ssh, so if you have kerberized ssh working, you can tunnel cvs over ssh with the CVS_RSH environment variable set to "ssh". An alternative method is to use "gserver", cvs with direct gssapi support. If you use that, you will want a "cvs" keytab, which you can also request from accounts@mit.edu. > Also if you have any configuration pointers for this sort of thing, I > would greatly appreciate them as well. If you are running Athena, The Private Athena Workstation Owners Guide, at http://web/olh/Private/index.html may be of use to you (chapter 5 is most relevant). If your machine is not an Athena machine, then I can't help much without knowing what it is. yak