DCI Home
 
About the DCI
 
DCI Support
 
Components
Userid Management
Kerberos Authentication
AFS Filespace
License Management
 
DCI Installation
UNIX
Windows NT

Kerberos Authentication

What is Kerberos?

Kerberos is a enterprise-level, secure authentication system. Under Kerberos, information obtained from your login (userid and password) is used to create a Kerberos ticket. This ticket is then sent to a secure, centralized database to check whether your ticket (and thus your login and password) is authentic. If an application understands Kerberos, it can use your Kerberos ticket to create other tickets that authenticate to remote services. This way tickets are sent over the network rather than your login and password.

ATN maintains a kerberos realm ISIS.UNC.EDU and several Kerberized applications. In order to use these Kerberized applications, you will need to install the following two files: /etc/krb.conf and /etc/krb.realms (given that an AFS client has already been installed). Standard files for use can be found at /afs/isis/common/etc/krb.conf and /afs/isis/common/etc/krb.realms. You may copy these files to /etc/krb.conf and /etc/krb.realms, just make sure that you give root ownership and that you give everyone read-only permissions.




Maintained by: dci@unc.edu
Url: http://www.unc.edu/depts/atn/dci/dci_components/kerberos/kerberos.html
Last Updated: 06 September 2002