[Search for users]
[Overall Top Noters]
[List of all Conferences]
[Download this site]
| Title: | USG buildhelp questions/answers |
|
| Moderator: | SMURF::FILTER |
|
| Created: | Mon Apr 26 1993 |
| Last Modified: | Mon Jan 20 1997 |
| Last Successful Update: | Fri Jun 06 1997 |
| Number of topics: | 2763 |
| Total number of notes: | 5802 |
946.0. "Final Stages of Kerberos Migration" by SMURF::FILTER (Automatic Posting Software - mail to flume::puck) Wed Sep 14 1994 14:52
Date Of Receipt: 12-SEP-1994 15:01:04.56
From: ALPHA::glidden "Mark Glidden USG 12-Sep-1994 1458"
To: sag@DEC:.zko.alpha, odehelp@DEC:.zko.alpha, barrys@DEC:.zko.alpha,
snow@DEC:.zko.alpha, tea@DEC:.zko.alpha
CC:
Subj: Final Stages of Kerberos Migration
This is the message I intend to send to users no later than Wed.
9/14/94, describing the need to remove the merge alias from yield.
PLEASE READ and send any comments to me prior to 5:00pm on 9/13
Thanks
Mark G
Approximately 3 months ago we began to migrate kerberos master services
from Ultrix to OSF1. There were a few problems in the begining
which have been addressed, and kerberos master services have been
stable for some time now.
There are two steps remaining and they are as follows.
1. remove the name merge from being associated with Kerberos master services
2. Change Port numbers in /etc/services to reflect those defined
in OSF1.
This message is aimed at resolving step 1 of the two remaining
steps the other will be addressed at a later time.
We have setup here in zk3.dec.com bind aliases for kerberos services,
for those of you who run bind here are the aliases
kerberos1.zk3.dec.com
kerberos2.zk3.dec.com
kerberos3.zk3.dec.com
kerberos4.zk3.dec.com
kerberos.zk3.dec.com
The aliases 1-4 are kerberos slaves and kerberos.zk3.dec.com is the
kerberos master.
For those of you that chose not to run bind the aliases currently
point to the following hosts.
1.flume.zk3.dec.com
2.alpha.zk3.dec.com
3.wasted.zk3.dec.com
4.flambe.zk3.dec.com
kerberos--> yield.zk3.dec.com
These aliases/host names are important to you if you use kerberos
directly from your workstation. You will need to change your /etc/krb.conf
to reflect the proper names/aliases.
Here are two sample /etc/krb.conf files (aliases and hosts)
ZONE
ZONE kerberos1.zk3.dec.com
ZONE kerberos2.zk3.dec.com
ZONE kerberos3.zk3.dec.com
ZONE kerberos4.zk3.dec.com
ZONE kerberos.zk3.dec.com admin dummy
-------------------------------------------------------------------
ZONE
ZONE flume.zk3.dec.com
ZONE alpha.zk3.dec.com
ZONE wasted.zk3.dec.com
ZONE flambe.zk3.dec.com
ZONE yield.zk3.dec.com admin dummy
For those of you located here in zk3.dec.com you should be using one of the two
krb.confs listed above for those outside of zk3 please contact your local site
administrator before changing your krb.conf as you may have a kerberos slave
local to you that should be listed in that file.
The biggest change here is that merge is no longer listed in /etc/krb.conf
as admin/dummy (master server), presently yield responds to some kerberos
requests as merge as of 9/20/94 this will no longer be supported. The reason
behind that is, the alias that allows yield to respond as merge also causes
kerberos slave propagation to fail quite regularly.
Should you have any questions regarding these changes please feel free
to contact me.
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Mark E. Glidden TCP/IP: [email protected]
Digital Equipment Corporation UUCP: decvax!glidden
110 Spit Brook Road DECnet: ALPHA::GLIDDEN
Nashua, NH 03062-2698 Voice: 1-603-881-0251
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++