Obtaining a srvtab

A srvtab allows the Kerberos server to verify the user on the other end. To get a srvtab (pronounced "serve tab"), send mail to accounts@mit.edu, and tell them you would like a srvtab for your workstation. Tell them your username, the machine name, and the service (e.g., rcmd).

You can run the mkserv command before you have installed the srvtab, but you cannot use the service until it is installed.

The Athena Accounts Consultants create the srvtab and notify you by electronic mail when it's ready. They will give you directions to install the srvtab.

As root, copy the srvtab into /etc/athena/srvtab, and change the owner of the srvtab file to "root." (Some srvtab's might belong in a different directory; the specific directory will be in the directions from the Network Help Desk.)

  oreo# cd /etc/athena
  oreo# chown root /etc/athena/srvtab

Change the access mode of the file to 400 (read-only by user "root"):

  oreo# chmod 400 /etc/athena/srvtab

Once you move a srvtab into place, you should change its version. The AFS copy is not completely secure, so changing the version makes certain that an unauthorized user doesn't end up with a valid key. To change the version of the srvtab, type:

  oreo# /usr/athena/bin/ksrvutil change -f /etc/athena/srvtab
  Principal: rcmd.oreo@ATHENA.MIT.EDU; version 1
  Changing to version 2.
  Key changed.

  Old keyfile in /etc/athena/srvtab.old.


Getting Software Updates