Conference netcad::hub_mgnt

1276.0. "KERBEROS security/DECserver900TM" by LEMAN::GAILLARDON () Thu Aug 04 1994 12:07

    
    
    Hi,
    
    I'm not sure to really understand how the user authentication works on a
    DECserver900TM.
    My understanding is that a "Kerberos V.4" software must reside somewhere
    on a host and each time a user logs in, the server900TM will make a
    request to the "Kerberos host", requesting a password which has been
    previously entered by the network manager...then the password entered
    by the user must match.
    The main feature being that the "password is DES encrypted".
    
    The 900TM is delivered with DNAS V1.3, so far so good but what else?
    Kerberos V.4 (part number???, which platform-SCO,AIX,OSF,ULTRIX..??)
    
    Thanks for any info which could better describe/explain the Kerberos
    security mechanism on DECserver900.
    
    Robert
    
    
    

    RE: .0
    
    The Kerberos client functionality for the DECserver family is disucssed 
    in TOOK::TERMINAL_SERVERS.  You will find some general descriptions there.
    
    As to platforms for the Kerberos server (KDC), well...  There's a
    limited Kerberos V4 KDC in the Ultrix kits.  It was primarily intended
    for Kerberized Hesiod, but it is also of general utility, though it
    doesn't support the "kpasswd" function.  There's also DECathena, which
    is a full implementation of Kerberos V4.  For VAX, you have to go third
    party, e.g. TGV's Multinet.  
    
    In the third party domain, there's Transarc's version of Kerberos, but 
    its a bit non-standard.  MIT originated Kerberos and there are several 
    ports of this to various U*ix platforms.
    
    Regards,
    
    Dave
    

    Thanks for the info