KDC Hardware

2006-01-05 Thread Amir Saad
i use Fedora 4, OpenLDAP and Kerberos instead of NIS what is the suitable hardware configuration for the KDC to support a network with 200 machines? thanks Amir Saad Software Engineer Kerberos mailing list Kerberos@mit.edu

Kerberos authentication over HTTP on proxy

2006-01-05 Thread Sunil Parolia
Hi all, I'm new to authentication Realm so I apologize if this is too basic Qs. Is user authentication at proxy possible at all for HTTP negotiate mechanism? On googling I found some pointers which say that its not possible. In current implementation ( BASIC) user has to maintain 2

Re: Year 2142 problem...

2006-01-05 Thread Martin v. Löwis
Amir Saad wrote: please give me more details about year 2038 problem, In 2038, an 31-bit time_t, counting in seconds from Jan 1, 1970, will overflow. As somebody else observed, this is not your problem, though: Kerberos will stop working of the time difference between the client machine and the

Re: Year 2142 problem...

2006-01-05 Thread Jeremy Thomas Hunt
I repeat my question, ... is the server's date set to 2142 as well? If the server and the client's times are out by more than the specified maximum clock skew of the KDC, which by default is 5 minutes, then you will not be able to get a Kerberos ticket. See

How many nodes in realm?

2006-01-05 Thread Rodrick Brown
I'm looking to implment Kerberos in our enviornment we have about 250 servers and are growing at an alarming rate, we plan to double this amount in about 2 years or so, I've been looking at documentation which talks about breaking servers into different realms, but i've also heard about huge

Re: Multiple realm, single KDC

2006-01-05 Thread Sam Hartman
Amir == Amir Saad [EMAIL PROTECTED] writes: Amir is it a bad idea to have multiple realm on a single kdc? At least the MIT code base has a hard time supporting kadmin access for all but the first realm in this configuration. Besides that, it works fine with the MIT code. --Sam

Re: KDC Hardware

2006-01-05 Thread Garrett Wollman
In article [EMAIL PROTECTED], Amir Saad [EMAIL PROTECTED] wrote: i use Fedora 4, OpenLDAP and Kerberos instead of NIS what is the suitable hardware configuration for the KDC to support a network with 200 machines? You can't buy a server that small any more. -GAWollman -- Garrett A. Wollman

Re: KDC Hardware

2006-01-05 Thread Jeffrey Altman
Garrett Wollman wrote: In article [EMAIL PROTECTED], Amir Saad [EMAIL PROTECTED] wrote: i use Fedora 4, OpenLDAP and Kerberos instead of NIS what is the suitable hardware configuration for the KDC to support a network with 200 machines? You can't buy a server that small any more.

Re: KDC Hardware

2006-01-05 Thread Jeffrey Hutzelman
On Thursday, January 05, 2006 06:53:27 PM + Garrett Wollman [EMAIL PROTECTED] wrote: In article [EMAIL PROTECTED], Amir Saad [EMAIL PROTECTED] wrote: i use Fedora 4, OpenLDAP and Kerberos instead of NIS what is the suitable hardware configuration for the KDC to support a network with