HDTenEightyP/NetNews huggingface dataset:
From: schuette@roadkill.nrl.navy.mil (Larry Schuette)
Newsgroups: comp.protocols.kerberos
Subject: Port to Silicon Graphics Irix
Keywords: kerberos, Irix 4.0, porting to
Date: 16 Apr 92 19:12:09 GMT
Organization: Naval Research Lab, Physical Acoustics, Washington, DC

Hi,
        Is anyone running kerberos on their SGI Workstations?  We
are contemplating setting up a kerberos server to cut down on the number
of unencrypted passwords being passed around our LAN.

Alternatively, is there a porting guide that I can grab for pointers?
        
Thanks, Larry
From: jvz@techbook.com (John Van Zandt)
Newsgroups: comp.protocols.kerberos
Subject: Re: Kerberos server: What should it be?
Date: 15 Apr 92 15:15:38 GMT
Article-I.D.: techbook.1992Apr15.151538.17141
Organization: TECHbooks of Beaverton Oregon - Public Access Unix

whrahe@SOMNET.SANDIA.GOV (Nov-William H Rahe) writes:

>I have run Version 4 with 4000 clients on a 5 - 10 MIP machine with no
>problem and it has been running version 5 for three weeks with no problem.

One of the interesting pieces of data would be to look at the load that is
put on the Kerberos Server. If the only kerberized applications are the
rcmds (rlogin, rsh, rcp) then it would make sense that a small server would
handle large numbers of users. But if a large number of applications are
kerberized (as in a true client/server environment), then the load would demand
a more powerful server.

What would be useful information to gather is the number of AUTH_REQUESTS
and APPL_REQUESTS that occur to a server in an eight-hour day.  Actually,
more fine-grained data would be even better.

But in the philosophy of the net, if users would mail me their statistics on
the number of requests their kerberos server has to field in eight hour
periods, then I'll summarize and post it in a couple of weeks. I'd also be
willing to include a summary of the platforms which different organizations
are using.

John Van Zandt
jvz@techbook.com

-- 
John Van Zandt
voice: (503) 697-1780			     fax: (503) 697-7064
email: jvz@techbook.COM                    Not affiliated with TECHbooks
Newsgroups: comp.protocols.kerberos
From: ibacon@seamis1.gsfc.nasa.gov (Ian Bacon)
Subject: kerberos for A/UX
Summary: kerberos for Macintoshes sought
Keywords: A/UX Macintosh
Organization: Goddard Space Flight Center
Date: Wed, 15 Apr 1992 15:14:29 GMT

Has anyone managed to successfully build the kerberos system under A/UX?
I believe that there is a version for the MacOS, but I need one specifically
for A/UX, and I am not savvy enough to be able to modify the source code 
distribution myself.
Any help would be much appreciated.

-- Ian Bacon --

--------------------------------------------------------------------------
|	Ian Bacon		| internet: ian@tsg.com		 	 |
|  Telos Systems Group		|	or: ibacon@seamis1.gsfc.nasa.gov |
|  Chantilly, Virginia		|					 |
|	 "If there is a bright center to the galaxy, you are 		 |
|		on the planet which is furthest from."			 |
|		Luke Skywalker, Star Wars, Episode 4			 |
--------------------------------------------------------------------------
Newsgroups: comp.protocols.kerberos
From: whrahe@SOMNET.SANDIA.GOV (Nov-William H Rahe)
Subject: Re:  Kerberos server: What should it be?
Organization: Internet-USENET Gateway at Stanford University
Date: Tue, 14 Apr 1992 22:24:50 GMT

I have run Version 4 with 4000 clients on a 5 - 10 MIP machine with no
problem and it has been running version 5 for three weeks with no problem.
Newsgroups: comp.protocols.kerberos
From: tytso@ATHENA.MIT.EDU (Theodore Ts'o)
Subject: Re: Kerberos server: What should it be?
Reply-To: tytso@athena.mit.edu
Organization: Internet-USENET Gateway at Stanford University
Date: Tue, 14 Apr 1992 17:19:38 GMT

   Date: 14 Apr 92 12:14:08 GMT
   From: peter@aucs.acadiau.ca (Peter Steele)

   We're considering installing kerberos and are wondering what type of
   machine we should get for the server. Is something like a Sun ELC
   adequate or should it be a faster machine?

Well, at MIT Project Athena we are still using a VS II (with two other
VS II as backup "slave" servers), which is supporting some 10,000 users.
So I suspect a Sun ELC will be plenty fast enough.  :-)

						- Ted
From: lorrayne@smiley.mitre.org (Lorrayne Schaefer)
Newsgroups: comp.protocols.kerberos
Subject: When will Kerberos become a standard by the IETF?
Date: 15 Apr 92 12:20:55 GMT
Article-I.D.: linus.1992Apr15.122055.18019
Organization: The MITRE Corporation, McLean, VA


Does anyone know when, in years/months, Kerberos will become a standard by
the IETF?

Thanks for your help

Lorrayne Schaefer
<lorrayne@smiley.mitre.org>
Newsgroups: comp.protocols.kerberos
From: hussien@MASI.IBP.FR
Subject: (none)
Organization: Internet-USENET Gateway at Stanford University
Date: Mon, 13 Apr 1992 09:39:24 GMT


	Please add hua@masi.ibp.fr to your mailing list

	Thank you

Newsgroups: comp.protocols.kerberos
From: jon@MIT.EDU (Jon A. Rochlis)
Subject: Re: Kerberos server: What should it be?
Organization: Internet-USENET Gateway at Stanford University
Date: Thu, 16 Apr 1992 04:22:15 GMT

MIT has basically run on 2 Micro-vax II's since 1986.  Our usage has 
grown tremendously and in the last year or so, some requests seem to be 
falling back to the slave.  We are in the process of replacing the 
kerberos servers this summer, but mostly for hardware support issues, 
not performance.  Kerberos caches so much and the KDC encrypts so 
little, that the KDC does not need to be very performant.  My advise to 
you would be use whatever you have or whatever is the easiest for you to 
fix after a hardware failure.  An ELC should be fine.

                -- Jon
From: peter@aucs.acadiau.ca (Peter Steele)
Newsgroups: comp.protocols.kerberos
Subject: Kerberos server: What should it be?
Date: 14 Apr 92 12:14:08 GMT
Distribution: na
Organization: Acadia University

We're considering installing kerberos and are wondering what type of
machine we should get for the server. Is something like a Sun ELC
adequate or should it be a faster machine?
--
Peter Steele        Unix Services Manager        peter.steele@acadiau.ca
Acadia University, Wolfville, NS   Tel: 902-542-2201   Fax: 902-542-4364
From: seclark@iscnvx.lmsc.lockheed.com (Steve Clark)
Newsgroups: comp.protocols.kerberos
Subject: Vendors Supporting Kerberos
Date: 9 Apr 92 22:03:15 GMT
Distribution: na
Organization: Lockheed Missiles and Space Co.

I need to know what vendors supply products incorporating Kerberos.  I
know about FTP Software,  Cygnus,  TGV,  and Wollongong.  Who else should
I contact?

Steve
seclark@lmsc.lockheed.com
Newsgroups: comp.protocols.kerberos
From: hussien@MASI.IBP.FR
Subject: (none)
Organization: Internet-USENET Gateway at Stanford University
Date: Tue, 14 Apr 1992 13:36:24 GMT


Hello to all

	I am trying to install Kerberos (V4) on a sun3 (m68k) machine running
	SunOS4.1. The compilation phase was a "sucess" but during
	execution I have a lot of troubles (Memory fault, .. Core dumped etc)
	Even if I did my best to take into account the local parametres 
	(in files such as config.Imakefile, osconf.h) I can'nt make it.

	Is there anything that most overlook (including me) that you could
	suggest me.  For your information, the last patch file I applied is
	patch9 (I think it is the most recent). 	

	I appreciate any informations ...
	thank you
From: kennethr@idt.unit.no (Kenneth Roar Iversen)
Newsgroups: comp.protocols.kerberos
Subject: Description of password_to_key algorithm
Date: 12 Apr 92 17:54:48 GMT
Distribution: comp.protocols.kerberos
Organization: Norwegian Center for Medical Informatics

I would very much like to get a (high-level) description, or a reference to a 
description, of the algorithm that converts a password to a (DES-)key in
Kerberos.

Please reply by email to: kenneth.r.iversen@mtfs.unit.no

Thanks in advance.

Kenneth R. Iversen
Senior Consultant
Norwegian Center of Medical Informatics
Center of Medical Technology
7005 TRONDHEIM
NORWAY

***************************
There's no way like Norway!
***************************
Newsgroups: comp.protocols.kerberos
From: WILKIN@MERLIN.HOOD.EDU
Subject: desubscribe wilkin@merlin.hood.edu
Organization: Internet-USENET Gateway at Stanford University
Date: Mon, 6 Apr 1992 12:47:41 GMT


desubscribe wilkin@merlin.hood.edu

thank you
Newsgroups: comp.protocols.kerberos
From: GaryO@apricot.co.uk (GaryO)
Subject: desubscribe garyo@apricot.co.uk
Organization: Internet-USENET Gateway at Stanford University
Date: Mon, 6 Apr 1992 11:16:00 GMT


 
desubscribe garyo@apricot.co.uk please.
 
 
Newsgroups: comp.protocols.kerberos
From: hussien@MASI.IBP.FR
Subject: Mailing list
Organization: Internet-USENET Gateway at Stanford University
Date: Tue, 14 Apr 1992 09:11:40 GMT


	Please add hua@masi.ibp.fr to your mailing list
	Thaank you
Newsgroups: comp.protocols.kerberos
From: paganett@iss.isei.jrc.it (Daniele Paganetti)
Subject: more informations
Organization: Internet-USENET Gateway at Stanford University
Date: Fri, 10 Apr 1992 09:20:12 GMT

I am an italian student of the University of Milano.
I am making my thesis at the JRC site of Ispra (Informatic services).
We have the kerberos' software (and all the Athena project's software)
and j would like to install it.
J have the "kerberos installation notes" of the initial release, January
24, 1989.
J would like to know if there is a new edition of it.
Could you send me more information about Kerberos
(about the possibility to use kerberos between some realms, and the
difference between kerberos and the other authentication server like
NIS)?
Send it to j_perdigao@jrc.it
Newsgroups: comp.protocols.kerberos
From: paganett@iss.isei.jrc.it (Daniele Paganetti)
Subject: more informations
Organization: Internet-USENET Gateway at Stanford University
Date: Fri, 10 Apr 1992 09:24:55 GMT

I am an italian student of the University of Milano.
I am making my thesis at the JRC site of Ispra (Informatic services).
We have the kerberos' software (and all the Athena project's software)
and j would like to install it.
J have the "kerberos installation notes" of the initial release, January
24, 1989.
J would like to know if there is a new edition of it.
Could you send me more information about Kerberos
(about the possibility to use kerberos between some realms, and the
difference between kerberos and the other authentication server like
NIS)?
Send it to d_paganett@iss.isei.jrc.it
Thank you very much
Ispra, april 10 , 1992
Newsgroups: comp.protocols.iso.x400
From: elsn4000@mailszrz.zrz.tu-berlin.de (Frank Elsner)
Subject: Re: X.400/SMTP/BITNET address problems
Organization: ZRZ/TU-Berlin
Date: Tue, 14 Apr 1992 12:42:31 GMT

In article <1992Apr14.112257.1415@and.csc.liv.ac.uk|  qq11@uxb.liv.ac.uk (Alan Thew) writes:
| I'm posting this on behalf of a friend who is receiving mail from a
| German X.400 site (on the dbp.de network) where the "To:" field starts
| off with a mixture of BITNET and domain style addresses. The recipient
| at the internet site finds that any reference to their address has been
| removed from the To: field at by delivery time.

Without showing us the mangled address there is no chance to help you. 

Managing a RFC987-Gateway (Internet to X.400 and vice versa) I'm extremely
interestet in the adress.
 
                       SHOW US THE ADRESS !
 
Frank Elsner (TUBerlin/ZRZ Postmaster)
From: jvt@dit.upm.es (Juan M. Vozmediano  Torres)
Newsgroups: comp.protocols.iso.x400
Subject: Re: Tsapd
Date: 13 Apr 92 08:35:24 GMT
Distribution: comp.protocols.iso.x400
Organization: Dept. Ingenieria de Sistemas Telematicos, UPM, Madrid, Spain.


>From: venky@engr.latech.edu ("Venky M. Venkatachalam")
>Subject: Tsapd
>
>        The tsapd daemon dies during the first interchange.Are there any fixes
>available for this?


We had the same problem several months ago. If I remember properly, tspad
enters in single shot mode (or test mode) if stderr is not redirected to a
file.

For multishot mode, we start it in this way (from /etc/rc):

--------
#! /bin/sh -
if [ -f /usr/local/lib/isode/etc/tsapd ]
       su isode -c "/usr/local/lib/isode/etc/tsapd &" >/dev/null 2>&1 &
--------

>        Thankx

	You are welcome
					Juan M.





--
------------------------------------------------------------------------------
Juan M. Vozmediano Torres                 Departamento de Ingenieria Telematica
Telephone:                   Escuela Superior de Ingenieros de Telecomunicacion
+34 1 549 57 00 Ext. 383                      Universidad Politecnica de Madrid
                                                       Ciudad Universitaria s/n
                                                       28040   MADRID   (SPAIN)
------------------------------------------------------------------------------
E-mail: jvt@dit.upm.es
X.400 : C=es;ADMD= ;PRMD=iris;O=upm;OU=dit;OU=cactus;S=vozmediano;G=juanma;
------------------------------------------------------------------------------
Newsgroups: comp.protocols.iso.x400
From: qq11@uxb.liv.ac.uk (Alan Thew)
Newsgroups: comp.protocols.iso.x400
Subject: X.400/SMTP/BITNET address problems
Date: 14 Apr 92 11:22:56 GMT
Organization: The University of Liverpool
Nntp-Posting-User: qq11

I'm posting this on behalf of a friend who is receiving mail from a
German X.400 site (on the dbp.de network) where the "To:" field starts
off with a mixture of BITNET and domain style addresses. The recipient
at the internet site finds that any reference to their address has been
removed from the To: field at by delivery time.

Does this sound familiar to anyone? (the recipient is in North America).
Thanks.
-- 
      Alan Thew : The University of Liverpool Computer Laboratory
Internet/Bitnet : qq11@uxb.liv.ac.uk
         UUCP   :           ....!mcsun!uknet!liv-uxb!qq11
        Voice   :  +44 51 794 3735        FAX : +44 51 794 3759
From: hta@boheme.er.sintef.no (Harald Tveit Alvestrand)
Newsgroups: comp.protocols.iso.x400
Subject: Re: Are X.400 messages really discarded in congestion situations?
Date: 8 Apr 92 06:54:40 GMT
Reply-To: harald.alvestrand@delab.sintef.no
Organization: SINTEF DELAB, Norway

This is nothing new.
Consider one of my favourite error reports:

>From:       <mailer-daemon@xx.yy.zz>
>To:         <list-redist@rare.no>
>Subject:    Undeliverable mail to VMS host
>
>Your message to aa@xx.yy.zz could not be delivered.
>The error message was:
>
>Deferred: fluckiger; -SYSTEM-F-EXDISKQUOTA, disk quota exceeded
>
>This message is equivalent to the DECnet-VAX error message:
>
> -SYSTEM-F-EXDISKQUOTA, disk quota exceeded
>
>The reason why your message could not be delivered is caused by the fact that
>your correspondants account has ran out of diskquota. Please contact your
>correspondant (by phone or otherwise) and tell him about this problem.


Mail systems have always junked mail in inscrutable ways for inscrutable
reasons.
One particular X.400 implementation has the unfortunate limitation that it
starts throwing away messages when 255 messages are in queue for a single
recipient, rather than junking them when his/her disk becomes full.

This system is rather common in Germany.
BUT: it usually takes quite a few days of "outage" for a queue to grow that
large, so with an attentive management staff, it is no big problem.
(although....it is a very ANNOYING one....)

The fact that some X.400 systems do not return message content, even when asked,
is unfortunate for interworking with people who expect the mail system to
archive their mail for them. Me, I either don't care, or I file a copy when
sending.

So, I don't panic. See no reason to.

-- 
                   Harald Tveit Alvestrand
Harald.Alvestrand@delab.sintef.no
C=no;PRMD=uninett;O=sintef;OU=delab;S=alvestrand;G=harald
+47 7 59 70 94
From: tnixon@hayes.com
Newsgroups: comp.protocols.iso.x400
Subject: Are X.400 messages really discarded in congestion situations?
Date: 6 Apr 92 17:38:51 GMT
Organization: Hayes Microcomputer Products, Norcross, GA

The following messages was posted in RISKS DIGEST.  I don't know the 
answer to his question.  Does anyone have the answer -- either a 
confirmation or a denial?  If you reply to him directly, please also 
post your answer to this newsgroup.  Thanks!
 
        -- Toby
        
Date: Sun, 5 Apr 92 15:35:11 BST
From: Cliff B Jones <cliff@computer-science.manchester.ac.uk>
Subject: X400
 
I have recently run into a problem with the X400 protocol that could
I believe kill e-mail as we know it. Remember when messages used to
be conveniently queued? Well, if the X400 is "congested" it sends a
(long) rejection message (which does *not* include the original
message!)  back to the originator.  Just imagine a conventional
mailing service where the delivery man who has too much to carry
just sends back a note saying "I threw your mail in the trash". 
 
I also understand that the whole problem comes from charging
arrangements between PTT's - no one want to pay for storage so
reject the messages when busy, don't send them back (but remember to
charge for the rejection message). 
 
I'd love to be corrected on this! If I'm right, e-mail could just
die.  I've already given up using it other than at weekends from
here to Germany. 
 
cliff jones

-- 
Toby Nixon, Principal Engineer      | Voice   +1-404-840-9200  Telex 151243420
Hayes Microcomputer Products, Inc.  | Fax     +1-404-447-0178  CIS   70271,404
P.O. Box 105203                     | BBS     +1-404-446-6336  AT&T    !tnixon
Atlanta, Georgia  30348             | UUCP uunet!hayes!tnixon  Fido   1:114/15
USA                                 | Internet                tnixon@hayes.com
From: venky@engr.latech.edu ("Venky M. Venkatachalam")
Subject: Tsapd
Newsgroups: comp.protocols.iso.x400
Date: 13 Apr 92 07:12:13 GMT


Hi
	The tsapd daemon dies during the first interchange.Are there any fixes available for this?

	our system is sun0S4.1.1. I compiled with #define sunos41 ,#define
sunos4_1,#define sunos4 definitions.Still it dies.

	Could you please tell me where I can get info regarding tsapd.
I am particularly interested in kicking the tsapd in singleshot mode
or multishot mode.This info would be very helpful and much appreciated.

	Thankx
		bye
			venky@engr.latech.edu
From: csg@able.uucp (Carl S. Gutekunst)
Newsgroups: comp.protocols.iso.dev-environ
Subject: Re: ISODE 7.0 on System 5 Release 4
Date: 9 Apr 1992 05:02:19 GMT
Organization: Pyramid Technology Corp.
NNTP-Posting-Host: able.eng.pyramid.com
Keywords: SVR4

>Has anyone out there gotten isode 7.0 to compile cleanly on a system 5
>release 4 system?

It's a mess. We have the base ISODE running now; most of the problems were in
terrible varargs ab-usage, and easy enough to kludge around. We also went with
the ksocket library interface for RFC1006, instead of TLI. (Besides the fact
that the TLI TCP/IP interface is a joke, we wanted to keep TLI clear for use
with Pyramid's CLNP and CLNS interfaces, and ISODE really only supports one
TLI interface at a time.) That of that took about a week of tinkering.

PP is another problem, and QUIPU is worse. The base ISODE code at least runs
on SVR3, which is enough to get you going nicely on SVR4. But PP and QUIPU
were never brought up on SVR3, and so rely heavily on the BSD compatability
library, which in every SVR4 I have seen is so shot full of holes as to be
almost unusable. More importantly, PP and QUIPU haven't been tested on more
than a handful of architectures, and seem to keep running into nagging little
problems with alignment and arguments that don't work the way they were
expected. 

And to think this is some of the most portable code I've ever worked on! UNIX
is just getting to big to grasp any more. :-(

My first step was to bring *everything* under a source-code debugger. I use
dbx, but sbd or whatever will do. I found bugs in secords that would have
taken hours to isolate otherwise. You will need about 300MB of disk to hold
all the binaries. 

My attack strategy for PP and QUIPU has been to much more tightly couple them
to the "compat" library and general.h header files of ISODE, and pull in the
various compatability hooks in source files when needed. The target is SVR3
first, then SVR4. This seems to be going well so far.  But this is obviously
not a weekend project.

<csg>
From: csg@able.uucp (Carl S. Gutekunst)
Newsgroups: comp.protocols.iso.dev-environ
Subject: Re: How do I get it?
Date: 9 Apr 1992 05:09:06 GMT
Organization: Pyramid Technology Corp.
Reply-To: <csg@pyramid.com>
NNTP-Posting-Host: able.eng.pyramid.com

>I know that ISODE has suddenly become non-free and non PD.

Then you know wrong. This is totally false. ISODE 7.0 and PP 6.0 are now and
always will be free to do with as you please, and can be ftp'd from many
places. The "official" site in North America is uupsi, but UUNet and most
other large archives have it, too.

There is *future* work on ISODE that will done by the newly formed ISODE
Consortium, which will not be PD and will be free only to educational and
research institutions; but that's because a whole bunch of people are getting
together and paying a software development team to work on ISODE and turn it
into commercial-quality software. What a concept.

<csg>
Newsgroups: comp.protocols.iso.dev-environ
From: dave@netmgr.mmc.com (David A. Rageth)
Subject: ISODE 7.0 on System 5 Release 4
Keywords: SVR4
Organization: mmc
Date: Mon, 6 Apr 1992 22:54:52 GMT

Has anyone out there gotten isode 7.0 to compile cleanly on a
system 5 release 4 system?  I have been looking at quipu on
a Pyramid MIS-S series running DCosx (AT&T SVR4 compatible)
and have had no luck compiling it yet.

-- 
x++++++++++++++++++++++++++++++++++++++++x
 x            David Rageth                x
  x   Internet : dave@mmc.com              x
   x   voice    : (303)977-4584             x
    x   fax      : (303) 971-1259            x
     x   USMail   : Martin Marietta           x
      x              P.O. Box 179 m/s 1084     x
       x              Denver, Colorado          x
        x                               80201    x
         x++++++++++++++++++++++++++++++++++++++++x
From: tannerc@cu18.crl.aecl.ca (Chris Tanner)
Newsgroups: comp.protocols.iso.dev-environ
Subject: Problem during compiling
Date: 14 Apr 92 13:15:51 GMT
Organization: AECL-Research

Hi All

While compiling ISODE on a DECstation 3100 running Ultrix vs 4.2, I get
the following message:

../pepsy/xpepsy -A -f -h -m rts.py           - Command executed

pepsy 7.0 #4 (cu18.crl.aecl.ca) of Mon Apr 13 20:34:11 EDT 1992
RTS none decode none: RTSE-apdus RTORQapdu RTOACapdu RTORJapdu RTTPapdu
    RTTRapdu RTABapdu ConnectionData SessionConnectionIdentifier
    CallingSSuserReference CommonReference
AdditionalReferenceInformation
    AbortReason
type RTORJapdu: Warning: Can't find file OACS.ph failed


comptag:warning implicit tag of unknown type RefuseReason
        comptag:treated as implicit

This occurs while in the directory isode-7.0/rtsap.

Is this a problem? If so, is their a fix for it?


Thanks in advance for your help.

Chris
-- 
Chris Tanner                  Email: tannerc@CU18.CRL.AECL.CA
AECL Research                 Phone: (613) 584-3311 X4053       
Chalk River, Ont.             FAX:   (613) 584-1082
Canada, K0J 1J0
Xref: sparky comp.protocols.iso.dev-environ:102 comp.unix.bsd:707
From: dawkins@bnr.ca (Spencer Dawkins)
Newsgroups: comp.protocols.iso.dev-environ,comp.unix.bsd
Subject: ISODE in BSD 4.4 release?
Keywords: iso,isode,bsd4
Date: 8 Apr 92 18:06:31 GMT
Followup-To: dawkins@bnr.ca
Organization: Bell-Northern Research, Richardson, Tx

I have heard from unreliable sources that BSD 4.4 will include ISODE. Does
anyone know if this is true? 

Is ISODE the way OSI is being included in BSD 4.4, or is there more to it
than this? 

Thanks for any info you can provide.
-- 
------------------------------------------------------------------------------
-  Spencer Dawkins			Bell-Northern Research	             -
-  (214) 684-4827			P.O. Box 833871                      -
-  Internet: dawkins@bnr.ca		Richardson TX 75083-3871             -
Xref: sparky comp.protocols.iso.dev-environ:107 comp.unix.bsd:791