> I had written:
> > Does NIS provide anything like the functionality of kerberos tickets
> > for distributed services like zephyr?
> >
>
> Derrick J. Brashear writes:
> > Solaris comes with a minimal Kerberos so you can get tickets to use with
> > the Krb4 RPC stuff, which of course you can use with NFS. Presumably
> > with NIS as well.
>
> Um, yes, but is this a kerberos server, or is this a way to get
> kerberos tickets using a key in NIS? If the latter, then presumably
> one could use NIS with AFS (although why one would want to do this
> is a good question.)
I think Derrick misunderstood the question. It's neither - it's just
Kerberos clients. You get a typical suite of Kerberos clients, and
the necessary support to use Kerberos authentication for Sun RPC calls,
including NFS. You have to provide the Kerberos server; AFAIK, Sun
does not ship one. On the other hand, the AFS kaserver makes a perfectly
fine Kerberos server, if you don't mind its shortcomings (doesn't
understand kadmin, can't separate the (sensitive) authentication service
from all other services, keys in the database aren't encrypted, and
plenty of annoying key-caching bugs).
-- Jeffrey T. Hutzelman (N3NHS) <[EMAIL PROTECTED]>
Systems Programmer, CMU SCS Research Facility
Please send requests and problem reports to [EMAIL PROTECTED]
