[25202] in Kerberos
AW: Common keytab file for all the application servers -
daemon@ATHENA.MIT.EDU (Barbat, Calin)
Wed Jan 4 02:44:26 2006
Content-class: urn:content-classes:message
MIME-Version: 1.0
Date: Wed, 4 Jan 2006 08:43:39 +0100
Message-ID: <60DE0C5FDA5A594EAB0F71425A0A3CEF615E9E@exc-mch01.mch.osram.de>
From: "Barbat, Calin" <c.barbat@osram.de>
To: "Markus Moeller" <huaraz@moeller.plus.com>, <kerberos@mit.edu>
Content-Type: text/plain; charset="iso-8859-1"
Errors-To: kerberos-bounces@mit.edu
Content-Transfer-Encoding: 8bit
Agreed. This is why "technically speaking" below...
Regards
Calin
-----Ursprüngliche Nachricht-----
Von: kerberos-bounces@MIT.EDU [mailto:kerberos-bounces@MIT.EDU] Im Auftrag von Markus Moeller
Gesendet: Montag, 2. Januar 2006 13:04
An: kerberos@MIT.EDU
Betreff: Re: Common keytab file for all the application servers - Isitpossible???
If you use the same keytab, the compromise of one device means you loose the security of all devices as the keytab can be used to sniff the traffic.
Markus
""Barbat, Calin"" <c.barbat@osram.de> wrote in message news:60DE0C5FDA5A594EAB0F71425A0A3CEF03B996@exc-mch01.mch.osram.de...
> Hi Sandy,
>
> of course you can use the same keytab on every device. At least, I
> can't see why it should not be possible - technically speaking. You
> should only consider if you want this scenario - all 100 devices
> connecting as the same user.
>
> Try it with 2 devices first - copy the same keytab to both of them,
> then interact with them, it should work fine.
>
> Best regards,
>
> - Calin.
>
> ________________________________________________
> Kerberos mailing list Kerberos@mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
