Re: create a startup script for krb5kdc, and using chkconfig

2008-02-25 Thread Franco Milicchio
On Feb 25, 2008, at 3:26pm, Le Trung Kien wrote: > Hi, I didn't see any scripts for Kerberos in /etc/rc.d/init.d > The system which I'm using is Redhat AS 3. Well, you should have packages for kerberos, as described in http://kbase.redhat.com/faq/FAQ_44_960.shtm . If you don't have any script,

Re: kerberos capacity planning questions

2008-02-25 Thread Russ Allbery
Tim Metz <[EMAIL PROTECTED]> writes: > As related requirements items, I am also looking for MIT KDC > installations with (1) greater than 50,000 accounts, and (2) greater > than 100,000 accounts (user + service principals). If anyone is running > an MIT KDC this size and can share that informatio

Re: kerberos capacity planning questions

2008-02-25 Thread Thomas Kula
On Mon, Feb 25, 2008 at 12:38:38PM -0800, Tim Metz wrote: > As related requirements items, I am also looking for MIT KDC > installations with (1) greater than 50,000 accounts, and (2) greater > than 100,000 accounts (user + service principals). If anyone is > running an MIT KDC this size and

Re: kerberos capacity planning questions

2008-02-25 Thread John Hascall
> Thank you Russ and John. > As related requirements items, I am also looking for MIT KDC > installations with (1) greater than 50,000 accounts, and (2) greater > than 100,000 accounts (user + service principals). If anyone is > running an MIT KDC this size and can share that information it

RE: support SSO in Windows with Keberos TGT

2008-02-25 Thread sylvain cortes
as you said for keeping the time in synch... but tilme issues can provide some stange behaviour with kerberos.Sylvain CORTES [EMAIL PROTECTED] > Date: Fri, 22 Feb 2008 18:14:24 -0500> From: [EMAIL PROTECTED]> To: [EMAIL > PROTECTED]> CC: [EMAIL PROTECTED]; kerberos@mit.edu> Subject: Re: suppor

Re: kerberos capacity planning questions

2008-02-25 Thread Tim Metz
>>> Greetings, >>> As part of a campus working group currently evaluating Kerberos product >>> options, I have been tasked with researching the following two >>> requirements for MIT Kerberos: >>> (1) Must house more than 200,000 accounts. >>> (2) Must issue more than 3 tickets per second. >>>

Re: auth_to_local_names

2008-02-25 Thread grackle
On Feb 22, 6:29 pm, Matthew Loar <[EMAIL PROTECTED]> wrote: > Are you telling ssh to log you in as user2 (-l user2)? The krb5.conf > doesn't affect who you log in as, just whether Kerberos will > authenticate you as that user. Thanks; this was the problem. -David

Re: create a startup script for krb5kdc, and using chkconfig

2008-02-25 Thread Le Trung Kien
Hi, I didn't see any scripts for Kerberos in /etc/rc.d/init.d The system which I'm using is Redhat AS 3. 2008/2/25, Franco Milicchio <[EMAIL PROTECTED]>: > > > On Feb 25, 2008, at 5:17am, Le Trung Kien wrote: > > > Hi, I'm attempting to create a startup script for krb5kdc daemon to > > start > > a

Re: support SSO in Windows with Keberos TGT

2008-02-25 Thread Danny Mayer
sylvain cortes wrote: > as you said for keeping the time in synch... > but tilme issues can provide some stange behaviour with kerberos. > > Sylvain CORTES [EMAIL PROTECTED] > If you have NTP issues you should post to the [EMAIL PROTECTED] mailing list or the comp.protocols.time.ntp newsgroup.

Re: create a startup script for krb5kdc, and using chkconfig

2008-02-25 Thread Franco Milicchio
On Feb 25, 2008, at 5:17am, Le Trung Kien wrote: > Hi, I'm attempting to create a startup script for krb5kdc daemon to > start > automatically at the booting of system. > And here is my content of krb5kdc script: Isn't Kerberos available on your system? It would include proper startup script