[LON-CAPA-dev] Kerberos
Gerd Kortemeyer
lon-capa-dev@mail.lon-capa.org
Sat, 26 Oct 2002 14:53:37 -0400
This is a multi-part message in MIME format.
--------------75B8E1B9454D8DF2E8F5A865
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Hi Mark,
Mark Lucas wrote:
>
>
> My proposal:
>
> (1) I have added two variables: lonDefKrbVer and lonDefKrbDom to the
> loncapa.conf (default version is either 4 or 5 and default domain
> would be oak_cell for us)
>
Actually, while this would work, it is somewhat against the philosophy of the
server network.
The idea is that a person can log into any server in the network and (after
maybe changing the domain on the very login screen) find the exact same
environment.
loncapa.conf is machine specific. I very much like your above entries, though,
but I would suggest to add to hosts.tab, so that the information is available on
all machines. Fields would be added to one of the entries for a machine out of
ohiou, just like we currently do with the domain plaintext description. I would
suggest to add the fields
:krb5:oak_cell
or for MSU
:krb4:MSU
For another domain (again generalizing your idea), it could be any other
mechanism we currently or in the future support for authentication. One could
even consider putting in there
:internal:D4F4421
where "D4F4421" is the salted standard first-login password. In essence, both of
those fields together could be the default passwd-file entries for somebody in
the respective domain.
- Gerd.
--------------75B8E1B9454D8DF2E8F5A865
Content-Type: text/x-vcard; charset=us-ascii;
name="korte.vcf"
Content-Transfer-Encoding: 7bit
Content-Description: Card for Gerd Kortemeyer
Content-Disposition: attachment;
filename="korte.vcf"
begin:vcard
n:Kortemeyer;Gerd
tel;fax:(517) 432-2175
tel;work:(517) 432-5468
x-mozilla-html:FALSE
url:http://www.lite.msu.edu/kortemeyer/
org:LITE Lab;DSME MSU
version:2.1
email;internet:korte@lite.msu.edu
title:Instructional Technology Specialist
adr;quoted-printable:;;123 North Kedzie Labs=0D=0AMichigan State University;East Lansing;MI;48824;USA
fn:Gerd Kortemeyer
end:vcard
--------------75B8E1B9454D8DF2E8F5A865--