From owner-freebsd-security Mon Feb 26 12:17:46 1996 Return-Path: owner-security Received: (from root@localhost) by freefall.freebsd.org (8.7.3/8.7.3) id MAA12873 for security-outgoing; Mon, 26 Feb 1996 12:17:46 -0800 (PST) Received: from grumble.grondar.za (root@grumble.grondar.za [196.7.18.130]) by freefall.freebsd.org (8.7.3/8.7.3) with ESMTP id MAA12864 for ; Mon, 26 Feb 1996 12:17:25 -0800 (PST) Received: from grumble.grondar.za (mark@localhost [127.0.0.1]) by grumble.grondar.za (8.7.3/8.7.3) with ESMTP id WAA07549; Mon, 26 Feb 1996 22:16:52 +0200 (SAT) Message-Id: <199602262016.WAA07549@grumble.grondar.za> To: Ken Lam cc: freebsd-security@FreeBSD.ORG Subject: Re: Kerberos 4 Slave Server Setup in 2.1 Date: Mon, 26 Feb 1996 22:16:51 +0200 From: Mark Murray Sender: owner-security@FreeBSD.ORG Precedence: bulk Ken Lam wrote: > >> krb.slaves > >> ---- > >> indigo.awod.com > > > >??? Is this a file? I find no reference to it anywhere? > > I found that in documentation from indiana.edu > http://browneyes.ucs.indiana.edu/subject/kerberos/krb.slaves.html Scanning around this site, I get the general impression that their Kerberos is a little different to our eBones. Not much evidence to go on, but it seems as though they have a few scripts that we do not have. Might be worthwhile your getting their kprop[d] docs. > >Not being a kprop[d] user, I cannot offer you much specific advice about > >that. > > How are you handling your master/slave servers without kprop? Is there > some other means? I am a small site (very small!), so I do not have much call for it. OTOH, if I was asked to set up something, I would probably (and this is suggested with just about ZERO thought) use something like encrypted and kerberised rcp with cron jobs to kick action into the file movements. Look at the source for kprop[d]. Even MIT doesn't advocate their use. (Thinks - "Hmm - what is MIT using now?" - you may want to look in Kerberos5) > Thanks again No prob. M -- Mark Murray 46 Harvey Rd, Claremont, Cape Town 7700, South Africa +27 21 61-3768 GMT+0200 Finger mark@grondar.za for PGP key