Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 19 Jan 1999 16:58:59 -0800 (PST)
From:      "Jason C. Wells" <jcwells@u.washington.edu>
To:        John Saunders <john.saunders@nlc.net.au>
Cc:        freebsd-questions@FreeBSD.ORG
Subject:   Re: Kerberos info
Message-ID:  <Pine.BSF.4.05.9901191655280.2274-100000@s8-37-26.student.washington.edu>
In-Reply-To: <Pine.LNX.3.95.990120102040.12072A-100000@nhj.nlc.net.au>

next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, 20 Jan 1999, John Saunders wrote:

>I'm after some very basic kerberos info. I'm not after install
>instructions (yet). I am after some info like "what is kerberos" and "what
>does it give me that is worth the effort to configure it". 

Kerberos is an authentication system. It is worth configure because it
keeps your password encrypted during transmission.

>I hear it's an authentication system, what is wrong with /etc/passwd?

Password authentication done the normal way requires your password to be
sent "cleartext" to the authenticating host. Anyone listening can grab
your password.

>Why not use NIS (yellow pages)?

I don't know why but I have this blue O'Reilly book that says NIS is a
serious security problem for networks that are connected to public
networks.

If you are interested in securing your system you should also investigate
'ssh'.

Catchya Later,		|	Give me UNIX or give me a typewriter.
Jason Wells		|	http://www.freebsd.org/


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.05.9901191655280.2274-100000>