Centralized kerberos authentication

[Sam Hartman]

>>>>> "Sensei" == Sensei  <noone at nowhere.org> writes:

    Sensei> Hi, I'm back.  I'm trying to set everything
    Sensei> step-by-step. The first step is to set up an
    Sensei> authentication server.

    Sensei> We're using a linux server and a client. Now the client
    Sensei> uses pam_krb5.so but I don't know if this is the right way
    Sensei> to authenticate over an insecure network.

No, it is not.

Use ssh with Kerberos GSSAPI support.

    Sensei> Can you help me? Can you point me to a simple document on
    Sensei> this issues?  -- Sensei <senseiwa:tin.it> <icq:241572242>
    Sensei> <msn:Sensei_Sen:hotmail.com>

Not really.  The issues aren't particularly simple and so no one has
really come up with a simple explanation of them.

It would be possible for someone to implement a turnkey solution; many
argue that Microsoft has.