[comp.protocols.kerberos] Kerberos with multi-platforms !

AEIC0456%VAX1.CENTRE.QUEENS-BELFAST.AC.UK@MITVMA.MIT.EDU (03/15/91)

I've just joined this list so please excuse me if I'm pitching the
wrong sort of questions or the topic's been discussed already.
We're in the process of planning an Athena type campus model and
to start it off we are introducing 5 workstation areas each with up
to 50 seats. DEC have come up with an attractive bid for a lot of the
hardware and some software (including Kerberos). The local DEC guys
assure me that we'd be in no way restricting ourselves to DECStations
in the future but that other vendors kit could very easily be attached
and interwork with the existing 'Athena-like' infrastructure - but they
don't have any experience in this area.
I'd very much appreciate comments from anyone using Kerberos in a
heterogeneous network: are you using the exact same programs or did you
acquire 'propriety' versions of Kerberos; is everything running
smoothely !
I've noticed a Mac version of Kerberos (or most of it) at MIT. Some
feedback on this would be very helpful too. Can anyone say whether
this is related to the Pilgrim project to pull Mac's and PC's into
Athena ?

Many thanks for any responses, George

dyer@spdcc.COM (Steve Dyer) (03/16/91)

In our efforts to bring the Athena environment to vendor platforms,
we've ported Kerberos to a variety of hardware, including the PS/2
(under AIX), A/UX 2.0, and the IBM RS6000.  Kerberos also exists
for the Sun 4 platform; I've successfully used Stanford's Kerberos
binaries (accessible via AFS) to interoperate with Athena.

Getting the Kerberos client libraries and applications to run
on new hardware is usually not much more difficult than saying
"make", once you've made some decisions about word size and
endian-ness.  I've no experience getting the server code working
on a different machine, and I've heard that there are relatively
more minor problems in this area, simply because all the Kerberos
servers at Athena are MicroVAXes.  On the other hand, if you're
integrating a new platform into an existing environment, you're
usually first interested in the client side of things.

The tightly-integrated applications which have been modified to
use Kerberos such as rlogin/rlogind require source to those
programs, of course.

-- 
Steve Dyer
dyer@ursa-major.spdcc.com aka {ima,harvard,rayssd,linus,m2c}!spdcc!dyer
dyer@arktouros.mit.edu, dyer@hstbme.mit.edu