Kerberos Confusion / Design Questions

2006-01-11 Thread Rodrick Brown
I'm planning on deploying Sun-Kerberos with LDAP I have a few design questions It seems SSO between all hosts will only work if Ievery server is added to each servers keytab? Right now my KDC can log into every server via gssapi-keyex SSO and other servers can log back into my KDC but from se

allowing SSO for other hosts

2006-01-08 Thread Rodrick Brown
I finally got the stock solaris 10 kerberos working but now i'm having problems with sso and hosts that are not a kdc, I have no problems getting a ticket on my clients and logging into my kdc but now i'm trying to allow others hosts to have sso ability to other clients that are I tried to do

Solaris 10 Kerberos broken?

2006-01-08 Thread Rodrick Brown
I've done everything in the Sun manuals and cross referenced it with the information provided in the Orielly manuals, but still have problems getting kadmind to start. Yes i've added all the kadmin/changepw keytab's needed. This is what I get in my kadmind.log file Jan 08 20:11:38 icarus kadmi

Solaris 10

2006-01-08 Thread Rodrick Brown
i'm trying to setup kerberos with the default KRB5 that comes stock with Solaris 10 i'm running into the same problem over and over, no matter what system I use or how many times I start from scratch. I'm unable to get kadmind to start. Jan 08 14:02:41 icarus krb5kdc[18679](info): AS_REQ 10.0.0

How many nodes in realm?

2006-01-05 Thread Rodrick Brown
I'm looking to implment Kerberos in our enviornment we have about 250 servers and are growing at an alarming rate, we plan to double this amount in about 2 years or so, I've been looking at documentation which talks about breaking servers into different realms, but i've also heard about huge ke

How to manage 1000+ systems

2005-06-11 Thread Rodrick Brown
In my current organization as we grow more and more its becoming a problem trying to manage all our users, systems and keep track of everything in a smoothly matter so one thing I'm looking to do is deploy an authorization and authentication mechanism with single sign on, for all our UNIX hosts. T

Re: Load Testing

2005-05-12 Thread Rodrick Brown
""Ives, Duane D"" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] > What tools are available for loading testing web applications that use > Kerberos. It's my understanding that QALoad and JMeter do not support > Kerberos. > > > Thanks -- Duane > > *** > Duane

Re: kerberos SERVER

2005-05-09 Thread Rodrick Brown
<[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] > Hello. > could you help me where i can find and download > a Kerberos SERVER please. > thanks a lot. > ever heard of Google ? Kerberos mailing list Kerberos@mit.edu https://