From senator-bedfellow.mit.edu!athena.mit.edu!eichin Sun May  2 04:57:17 EDT 1993
Article: 39677 of comp.os.linux
Path: senator-bedfellow.mit.edu!athena.mit.edu!eichin
From: eichin@athena.mit.edu (Mark W. Eichin)
Newsgroups: comp.os.linux
Subject: Re: Intel, the Pentium and Linux
Date: 2 May 1993 08:55:23 GMT
Organization: MIT SIPB/Cygnus Support
Lines: 32
Message-ID: <1s029rINNkm3@senator-bedfellow.MIT.EDU>
References: <1993Apr27.220743.9409@sol.ctr.columbia.edu> <1993Apr28.091739.6121@swan.pyr> <willmore.736053123@help.cc.iastate.edu>
NNTP-Posting-Host: hodge.mit.edu
Summary: kerberos is available
Keywords: kerberos

In article <willmore.736053123@help.cc.iastate.edu> willmore@iastate.edu (David Willmore) writes:
>Maybe you shouldn't use the unsupported subsets?  Better yet, don't use
>the Unix password system at all.  We don't.  We use kerberos like OSF/1
>does.  That's modern unix.  Does linux have kerberos?  Don't expect it
>too soon.
>---------------------------------------------------------------------------
>willmore@iastate.edu | "Death before dishonor" | "Better dead than greek" | 
>David Willmore  | "Ever noticed how much they look like orchids? Lovely!" | 
>---------------------------------------------------------------------------

Well, if you're using Kerberos for *local* access to the machine,
you'd better know what you're doing (ie, the local machine has to have
a srvtab of some kind to verify the response to the kdc...)
	That said, I've ported Kerberos 4 to Linux (as part of my work
at Cygnus Support.) It wasn't particularly difficult, mostly because I
had already done a lot of work to clean up the POSIX branches of the
code. I've talked to Peter McDonald about putting out a Kerberos SLS
disk, but haven't quite worked out the export issues. We are, however,
*using* it at MIT (and Cygnus.) If MIT were ever planning another
Kerberos 4 release (4p10 is expected to have been the final) I'd make
sure they included the Linux changes... we'll see what happens with
Kerberos 5.
	For comparison, it took me *far* longer to port Kerberos
(including secure and encrypted rlogin) to SPARC-Solaris 2 and to the
latest SCO unix than it did to port it to Linux.

				_Mark_ <eichin@athena.mit.edu>
				MIT Student Information Processing Board
				Cygnus Support <eichin@cygnus.com>

ps. I don't often have time to keep up with c.o.l so if you want me to
read comments on this thread please email them to me. Thanks.	_Mark_


