Edit the edu.mit.Kerberos file?

Sven Peters MrSven.Peters at epost.de
Sun Sep 29 09:05:01 EDT 2002


Hi,

I just try to get familiar with Kerberos 4.5 and I read your online
Documentation
(http://web.mit.edu/macdev/Development/MITKerberos/Common/Documentation/
preferences-osx.html). 
I am using Mac OS X 10.2. I installed Mac OS X 10.2 Kerberos Extras.

Now I am at the point to configure the edu.mit.Kerberos file in
/Library/Preferences. As you wrote I need to know: ³...what realms exist,
what Kerberos versions are supported by them, and where to find the
servers.²
I guess I have to use my domain name intead of yours (ATHENA.MIT.EDU), but
I am not sure. How do I know if the Kerberos server at my Mac is running?.
Where to figure out what Kerberos versions are supported on my Mac. 

And is there a Documentation available that explains how the Kerberos
Authentication works? I just want to answer myself some simple questions
like: What user and password entries do I have to use in Kerberos? Are
these the user and password for my netinfo database account or already the
user and password for the program like Fetch? 

Your example for the edu.mit.Kerberos file entries online is the
following:

 ³Here is an example Kerberos configuration:

    [libdefaults]
        default_realm = ATHENA.MIT.EDU
        ticket_lifetime = 600
        default_tkt_enctypes = des-cbc-crc
        default_tgs_enctypes = des-cbc-crc

    [realms]
            ATHENA.MIT.EDU = {
                    kdc = kerberos.mit.edu:88
                    kdc = kerberos-1.mit.edu:88
                    kdc = kerberos-2.mit.edu:88
                    kdc = kerberos-3.mit.edu:88
                    admin_server = kerberos.mit.edu
                    default_domain = mit.edu
            }
            MEDIA-LAB.MIT.EDU = {
                    kdc = kerberos.media.mit.edu
                    admin_server = kerberos.media.mit.edu
            }

    [domain_realm]
        .mit.edu = ATHENA.MIT.EDU
        mit.edu = ATHENA.MIT.EDU
        .media.mit.edu = MEDIA-LAB.MIT.EDU
        media.mit.edu = MEDIA-LAB.MIT.EDU

    [v4 realms]
            ATHENA.MIT.EDU = {
                    kdc = kerberos.mit.edu
                    kdc = kerberos-1.mit.edu
                    kdc = kerberos-2.mit.edu
                    kdc = kerberos-3.mit.edu
                    admin_server = kerberos.mit.edu
                    default_domain = mit.edu
                    string_to_key_type = mit_string_to_key
            }
            UMICH.EDU = {
                    kdc = kerberos.umich.edu
                    admin_server = kerberos.umich.edu
                    default_domain = umich.edu
                    string_to_key_type = afs_string_to_key
            }

    [v4 domain_realm]
        .mit.edu = ATHENA.MIT.EDU
        mit.edu = ATHENA.MIT.EDU
        .umich.edu = UMICH.EDU
        umich.edu = UMICH.EDU²
        
So how do I know what to enter in the edu.mit.Kerberos file for my site?
And where to find it?
And at least what is the style and nomenclature of entries?

I hope you would like to give me a little advise in learning the
configuration of Kerberos.

Thank you already in before!

I hope to hear from you soon,

with regards,

Sven Peters 




More information about the krbdev mailing list