From geer@ATHENA.MIT.EDU Tue Aug 12 12:05:26 1986 To: alix, kelley Cc: kerberos, planning_managers, lerman Subject: kerberos related testing Date: Tue, 12 Aug 86 12:02:02 -0500 From: geer@ATHENA.MIT.EDU We want to propagate some Kerberos and Kerberos related files as follows. I have discussed this with Pete, but also want to put it in this form for your reference. The object is to put some parts of Kerberos out for testing now in the hope of releasing them to general use for September 1. We propagaged /krb/passwd to all time share machines Monday. This implements John's dual /etc/passwd change and Kerberos register/change routine as of code freeze date. It has no effect on anyone not already using Kerberos. Next Monday, pending testing by existing friendly testers who already have /krb in their search path before /bin and /usr/ucb, we'll move /krb/passwd to /usr/athena in E40 staff machines. This will allow /bin/passwd to remain as it now is (which is useful in single user mode especially) and yet puts the new passwd in front of all staff users, based on Athena standard search paths. This has almost no effect on those not yet using Kerberos, the only exception is that this passwd installs their password in the Kerberos database in addition to the usual Athena_reg database. Pending staff use and acceptable behavior, we would propagate this to general use with the September 1 time-share release. (Our real desire is to do this Monday 25 August). This is important; 9/1 is the best, or perhaps only, time to start loading the Kerberos database. Loading it is, itself, a prerequisite to a smooth integration of Kerberos wise services later in the year. Bugs remain in using this new passwd on workstations, and will be addressed ASAP. Today, Tuesday 12 August, we will put out the last release of Kerberos before September. (This release provides the ticket-granting ticket functionality.) The old /etc/k_in_tkts file is no longer needed. If further bugs appear, we will address them as part of our handling of other bugs found before the September 1 date, which is to say fast fix and inclusion in a new bug-fix release. Kerberos dependent servers (klogind & kshd) will be released to all Athena machines today. (Other key files are /etc/services entries, /etc/inetd.conf entries, and the /etc/srvtab unique machine key.) These free-standing servers will not affect those not using Kerberos, but will allow Kerberos testers/users to use authenticated rlogin and rsh to the entire Athena environment. --dan