[LON-CAPA-dev] Kerberos

[Gerd Kortemeyer]

This is a multi-part message in MIME format.
--------------75B8E1B9454D8DF2E8F5A865
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

Hi Mark,

Mark Lucas wrote:

>
>
>         My proposal:
>
> (1) I have added two variables: lonDefKrbVer and lonDefKrbDom to the
>     loncapa.conf (default version is either 4 or 5 and default domain
>     would be oak_cell for us)
>

Actually, while this would work, it is somewhat against the philosophy of the
server network.

The idea is that a person can log into any server in the network and (after
maybe changing the domain on the very login screen) find the exact same
environment.

loncapa.conf is machine specific. I very much like your above entries, though,
but I would suggest to add to hosts.tab, so that the information is available on
all machines. Fields would be added to one of the entries for a machine out of
ohiou, just like we currently do with the domain plaintext description. I would
suggest to add the fields

  :krb5:oak_cell

or for MSU

  :krb4:MSU

For another domain (again generalizing your idea), it could be any other
mechanism we currently or in the future support for authentication. One could
even consider putting in there

 :internal:D4F4421

where "D4F4421" is the salted standard first-login password. In essence, both of
those fields together could be the default passwd-file entries for somebody in
the respective domain.

- Gerd.

--------------75B8E1B9454D8DF2E8F5A865
Content-Type: text/x-vcard; charset=us-ascii;
 name="korte.vcf"
Content-Transfer-Encoding: 7bit
Content-Description: Card for Gerd Kortemeyer
Content-Disposition: attachment;
 filename="korte.vcf"

begin:vcard 
n:Kortemeyer;Gerd
tel;fax:(517) 432-2175
tel;work:(517) 432-5468
x-mozilla-html:FALSE
url:http://www.lite.msu.edu/kortemeyer/
org:LITE Lab;DSME MSU
version:2.1
email;internet:korte@lite.msu.edu
title:Instructional Technology Specialist
adr;quoted-printable:;;123 North Kedzie Labs=0D=0AMichigan State University;East Lansing;MI;48824;USA
fn:Gerd Kortemeyer
end:vcard

--------------75B8E1B9454D8DF2E8F5A865--