From geer@ATHENA.MIT.EDU  Tue Aug 12 12:05:26 1986
To: alix, kelley
Cc: kerberos, planning_managers, lerman
Subject: kerberos related testing
Date: Tue, 12 Aug 86 12:02:02 -0500
From: geer@ATHENA.MIT.EDU

We want to propagate some Kerberos and Kerberos related files as
follows.  I have discussed this with Pete, but also want to put it in
this form for your reference.  The object is to put some parts of 
Kerberos out for testing now in the hope of releasing them to 
general use for September 1.

We propagaged /krb/passwd to all time share machines Monday.  This
implements John's dual /etc/passwd change and Kerberos register/change
routine as of code freeze date.  It has no effect on anyone not already
using Kerberos.

Next Monday, pending testing by existing friendly testers who already
have /krb in their search path before /bin and /usr/ucb, we'll move
/krb/passwd to /usr/athena in E40 staff machines.  This will allow
/bin/passwd to remain as it now is (which is useful in single user mode
especially) and yet puts the new passwd in front of all staff users,
based on Athena standard search paths.  This has almost no effect on 
those not yet using Kerberos, the only exception is that this passwd
installs their password in the Kerberos database in addition to the usual
Athena_reg database.

Pending staff use and acceptable behavior, we would propagate this to
general use with the September 1 time-share release.  (Our real desire is
to do this Monday 25 August).  This is important; 9/1 is the best,
or perhaps only, time to start loading the Kerberos database.  Loading
it is, itself, a prerequisite to a smooth integration of Kerberos wise
services later in the year.

Bugs remain in using this new passwd on workstations, and will be
addressed ASAP.  Today, Tuesday 12 August, we will put out the last
release of Kerberos before September.  (This release provides the
ticket-granting ticket functionality.)  The old /etc/k_in_tkts file is
no longer needed.  If further bugs appear, we will address them as
part of our handling of other bugs found before the September 1 date,
which is to say fast fix and inclusion in a new bug-fix release.

Kerberos dependent servers (klogind & kshd) will be released to all
Athena machines today.  (Other key files are /etc/services entries,
/etc/inetd.conf entries, and the /etc/srvtab unique machine key.)
These free-standing servers will not affect those not using Kerberos,
but will allow Kerberos testers/users to use authenticated rlogin and
rsh to the entire Athena environment.

--dan