Datasheet

“main” (Installation and Administration) — 2004/6/25 — 13:29 — page 663 — #689
i
i
i
i
i
i
i
i
26
Security in the Network
imapd
pine
You no longer have to type your password for using these applications
because Kerberos has already proven your identity. ssh, if compiled with
Kerberos support, can even forward all the tickets acquired for one work-
station to another one. If you use ssh to log in to another workstation, ssh
makes sure the encrypted contents of the tickets are adjusted to the new sit-
uation. Simply copying tickets between workstations is not sufficient as the
ticket contains workstation-specific information (the IP address). XDM and
KDM offer Kerberos support, too. Read more about the Kerberos network
applications in the Kerberos V5 UNIX User’s Guide at http://web.mit.
edu/kerberos/www/krb5-1.3/krb5-1.3/doc/krb5-user.html.
26.5.4 For More Information
SUSE LINUX contains a free implementation of Kerberos called Heim-
dal. Its documentation is installed along with the package heimdal un-
der /usr/share/doc/packages/heimdal/doc/heimdal.info. It is
also available at the project’s home page at http://www.pdc.kth.se/
heimdal/.
The official site of the MIT Kerberos is http://web.mit.edu/
kerberos/www/. There, find links to any other relevant resource concern-
ing Kerberos. A “classical” dialog pointing out the principles of Kerberos
is available at http://web.mit.edu/kerberos/www/dialogue.
html. It is a less technical but still comprehensive read.
The paper at ftp://athena-dist.mit.edu/pub/kerberos/doc/
usenix.PS gives quite an extensive insight to the basic principles of Ker-
beros without being too difficult to read. It also provides a lot of opportu-
nities for further investigation and reading about Kerberos.
These links provide a short introduction to Kerberos and answer many
questions regarding Kerberos installation, configuration, and administra-
tion:
http://web.mit.edu/kerberos/www/krb5-1.3/krb5-1.3/doc/
krb5-user.html,
http://web.mit.edu/kerberos/www/krb5-1.3/krb5-1.3/doc/
krb5-install.html,
http://web.mit.edu/kerberos/www/krb5-1.3/krb5-1.3/doc/
krb5-admin.html.
663SUSE LINUX Enterprise Server