[2624] in Kerberos
Re: Solaris 2.1 Kerberos
daemon@ATHENA.MIT.EDU ("Mark W. Eichin")
Thu Mar 18 03:24:03 1993
Date: Thu, 18 Mar 93 03:14:53 EST
From: eichin@Athena.MIT.EDU ("Mark W. Eichin")
To: cwm@lanl.gov
Cc: kerberos@Athena.MIT.EDU
In-Reply-To: [2620]
> Has anyone investigated or is anyone using the Kerberos version
> that comes with Solaris. I have some questions:
> 1) What services are Kerberized?
> 2) Is NFS Kerberized and can it be used with a
> MIT V4 Kerberos Ticket server?
NFS is the *only* thing that is provided Kerberized in Solaris 2. Both
mount-time and file-access-time authentication is done, apparently
using Kerberos V4-based Secure RPC; to my knowledge, Sun has not yet
released specifications of this, though they suggested a year ago that
they would. Note that this is completely unrelated to the MIT "uid
mapping" NFS enhancements.
I've personally demonstrated using Cygnus Network Security
release of the V4 KDC, running on a Decstation, to provide key service
to a pair of Solaris machines to authenticate NFS servers, which
indicates that they are using a compatible Kerberos protocol
implementation, at least as of an earlier release of the Solaris (I
haven't tried 2.1 yet.)
_Mark_ <eichin@athena.mit.edu>
Cygnus Support <eichin@cygnus.com>
MIT Student Information Processing Board
