On Friday, March 02, 2001 17:40:33 -0800, Peter Scott
<[EMAIL PROTECTED]> wrote:
+-----
| But most of our AFS clients don't have an /etc/krb.conf. That's why our
| primary authentication server has the alias 'kerberos', because we don't
| have the ability to dictate the contents of /etc/krb.conf or environment
| variables on the users' workstations. Yet klog manages to exercise
| redundancy in the face of this... how?
+--->8
/usr/vice/etc/CellServDB serves roughtly the same function for
kaserver-based authentication that /etc/krb.conf serves for krb4.
BTW, you could make your "kerberos" DNS entry a round-robin, or you could
use a version of krb4 which will try kerberos-1, kerberos-2, etc. if
kerberos doesn't respond (KTH kerberos does this).
--
brandon s. allbery [os/2][linux][solaris][japh] [EMAIL PROTECTED]
system administrator [WAY too many hats] [EMAIL PROTECTED]
electrical and computer engineering KF8NH
carnegie mellon university ["better check the oblivious first" -ke6sls]
