From owner-freebsd-questions Tue Mar 17 15:08:54 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id PAA21822 for freebsd-questions-outgoing; Tue, 17 Mar 1998 15:08:54 -0800 (PST) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from cisco.it ([195.103.235.2]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id PAA21744 for ; Tue, 17 Mar 1998 15:08:47 -0800 (PST) (envelope-from A.Nati@cisco.it) Received: from tonino ([195.103.235.32]) by cisco.it (8.7.5/8.7.3) with SMTP id LAA09198 for ; Sun, 18 Dec 1994 11:55:51 +0100 (MET) Message-Id: <3.0.1.32.19980318000926.007bb7b0@posta.cisco.it> X-Sender: cp011@posta.cisco.it X-Mailer: Windows Eudora Pro Version 3.0.1 (32) [I] Date: Wed, 18 Mar 1998 00:09:26 +0100 To: freebsd-questions@FreeBSD.ORG From: Antonio Nati Subject: Kerberos basic questions Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG I'm trying to figure how to use kerberos in my environment. I have three WEB servers and a PPP server (all with FreeBSD 2.1.5), and I would like to have only one authentication service for all the boxes. As far as I'm seeing in my first 2.2.5 installation, kerberos doesn't manage at all all the supplemental information (uid, gid, home, etc) that are essential to define an user. So I imagine that I should anyway create new users with adduser on any system where they should work, adding them later to the kerberos database and using kerberos only to assure them fast logins on the various systems. Is that right? Other three questions. 1) Is there any kerberos mechanism in the last versions of apache? 2) Is the usage of Kerberos completely transparent or the programs must be modified in order to use it? The LOGIN options of the pppd server is going to check the kerberos database or it simply checks against the passwd file? 3) Given the fact that I have a small amount of POP users already working, how to populate the kerberos database starting from the existing passwd file (and passing from MD5 to DES)? Thanks a lot, Tonino To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message