Request for help: How do I get tickets to these workstations?

Chris Hecker checker at
Tue Jun 5 03:13:56 EDT 2012

I thought the entire point of kerberos is that you can have your KDC
open to the internet?

I run mine open.


On 2012/06/05 00:10, Jan-Piet Mens wrote:
> Ross,
> On Tue Jun 05 2012 at 08:54:11 CEST, Russ Allbery wrote:
>> Our KDCs have always been open to the Internet.
> Oh, I've always thought KDCs need to be particularly protected from the
> elements...
> Are you willing/able to share a bit more information on what kind of
> protection measures (apart from basic Unix) you apply to your KDCs, or
> is there a paper on how MIT has implemented that?
>         -JP
> ________________________________________________
> Kerberos mailing list           Kerberos at

More information about the Kerberos mailing list