Organization: State University of New York, Stony Brook
X-Envelope-to: ibmtcp-l@pucc.BITNET
X-VMS-To: IN%"ibmtcp-l@pucc"
MIME-version: 1.0
Content-transfer-encoding: 7BIT
Newsgroups: bit.listserv.ibmtcp-l
Date:         Wed, 12 Aug 1992 11:38:58 -0400
Reply-To:     Sanjay Kapur <skapur@SBCCMAIL>
From:         Sanjay Kapur <SKAPUR@SBCCMAIL.BITNET>
Subject: Kerberos is available on VMS. Can IBM TCP/IP support it?

Will IBM TCP/IP on VM or OS/2 interoperate with Multinet TCP/IP running
Kerberized rlogin, rcp, rsh and telnet clients and servers ?

  Sanjay Kapur    (SK54)              |Internet:    Sanjay.Kapur@sunysb.edu
  Systems Staff, Computing Services,  |Bitnet:      SKAPUR@USB
  State University of New York,       |SPAN/HEPnet: 44132::SKAPUR
  Stony Brook, NY 11794-2400        |Phone:+1-516 632 8029, FAX:+1-516 632 8046

>From: VANCE@TGV.COM (L. Stuart Vance)
>Subject: MultiNet Authentication Services (aka Kerberos support for VMS)
>To: info-multinet@TGV.COM
>X-Phone: 408/427-4366 (work); 408/427-4365 (fax)
>X-Address: 603 Mission Street; Santa Cruz, CA  95060 (work)
>
>Thought many of you might be interested in this.  For those of you outside of
>the US and Canada, we are still working the export issue with the US State
>Department.  We're hoping for a favorable ruling to ship the stuff worldwide,
>but as of yet have not gotten a definitive statement from State.  Keep your
>fingers crossed....
>
>Regards!
>-----Stuart
>
>                       ============================
>
>FOR IMMEDIATE RELEASE
>August 3, 1992
>
>TGV Ships MultiNet Authentication Services
>
>MultiNet Joins Select Group of Products To Extend
>Network Security With Kerberos User Authentication
>
>SANTA CRUZ -- TGV, Inc., today began shipping new security support
>software for VMS users who access data over TCP/IP networks.
>MultiNet Authentication Services implements Kerberos support for
>MultiNet, TGV's TCP/IP environment for VMS. By adding Kerberos
>authentication, network administrators can better secure their
>networks against unwanted intruders by protecting user passwords
>transmitted over the network.
>
>"Very few people appreciate just how easy it is to access password
>information on a broadcast network medium such as Ethernet," said
>David Kashtan, President of TGV. "By adding Kerberos
>authentication, it becomes impossible for a network snooper to use
>a network analyzer or listening device to capture passwords that
>would normally be broadcast in clear text. The Kerberos
>authentication scheme has already been embraced by DEC, as well as
>a number of key players in the UNIX world. It's the only logical
>way to protect networks that share data between multiple computing
>platforms."
>
>Taking its name from the three-headed dog that guards the gates of
>Hades in Greek mythology, Kerberos authentication was developed by
>MIT's Project Athena as a means of authenticating network users.
>MultiNet Authentication Services uses Kerberos version 4 to enable
>MultiNet users to prove their identities to Kerberos-supported
>machines across a TCP/IP network without sending passwords in clear
>text. Using Data Encryption Standard (DES) technology, user
>passwords are processed by a central authentication server which
>issues tickets for network access. These tickets, in turn, are used
>to generate a series of encrypted keys that provide access to
>network services. These keys are never transmitted across the
>network in a form that can be recognized or replicated, so
>passwords are never broadcast and access to the network remains
>secure.
>
>MultiNet Authentication Services will interoperate with any other
>Kerberos 4-compatible implementation, giving MultiNet users secure
>access to VMS systems, UNIX systems, and other Kerberos-supported
>services on various computing platforms. MultiNet Authentication
>Services provides "Kerberized" client/server support for the UNIX
>"r" services, including RLOGIN, RSHELL, and RCP, as well as TELNET.
>Only Kerberos authenticated users are granted remote login (RLOGIN
>and TELNET), command execution (RSHELL), and file copy (RCP)
>privileges. MultiNet Authentication Services includes the Key
>Distribution Center (KDC), also referred to as the Kerberos server,
>which supports the Kerberos database of authorized users and their
>passwords. MultiNet KDCs, including KDCs from other vendors, can be
>used in the same network to provide greater reliability through
>redundancy. Database information is shared between KDCs using an
>implementation-independent data exchange.
>
>MultiNet Authentication Services is compatible with MultiNet V3.1
>and VMS V5.0 or later. MultiNet Authentication Services is included
>in the base license for MultiNet, but it is provided as a separate
>option on 9-track magnetic tape or TK50 streaming cassette for a
>media charge of $150 for magnetic media and documentation. Only one
>tape is required per site license. Product support for MultiNet
>Authentication Services is included with the MultiNet maintenance
>agreement. Contact TGV regarding product availability outside the
>United States.
>
>TGV, Inc., designs, manufactures, markets and supports
>standards-based networking and application software for Digital
>Equipment Corporation VMS computers. TGV, Inc., is located at 603
>Mission Street, Santa Cruz, California 95060; telephone: (408)
>427-4366; FAX: (408) 427-4365.
>
>-30-
>
>MultiNet is a registered trademark of TGV, Inc. VMS and VAX are
>trademarks of Digital Equipment Corporation. Kerberos and Project
>Athena are both trademarks of the Massachusetts Institute of
>Technology. UNIX is a registered trademark of UNIX Systems
>Laboratories, Inc. All other trademarks are the property of their
>respective owners.
Comments: Gated by NETNEWS@AUVM.AMERICAN.EDU