 |
AFS & Kerberos
Best Practices Workshop 2005 |
 |
An Introduction to Kerberos and it's Best Practices
Speaker: Ken Hornstein, Naval Research Labs
June 21, 2005 in Rangos 3, on the 2nd floor of the University Center from 9 am to 5 pm
--------
Slides are
available - Userid: afsworkshop Password: kerberos
--------
With its adoption by diverse vendors such as Microsoft, Sun, and Apple,
Kerberos has become the de-facto standard for enterprise authentication.
Sadly, the documentation for Kerberos has never been its strong point.
Many administrators find the lack of "big picture" documentation a
hinderance to the use of Kerberos, and how it interacts with AFS has
always been an endless source of confusion.
The goal of this tutorial is to de-mystify Kerberos, and explain its role
within AFS. While this will not be a hands-on tutorial, participants are
encouraged to ask specific questions related to issues they have with
Kerberos at their site. Topics will include:
- A basic introduction to the Kerberos protocol.
- Site requirements for using Kerberos.
- Understanding the whole encryption type negotiation mess.
- Basic Kerberos administrative operations (Heimdal and MIT will be covered)
- Kerberos's interactions with AFS.
- The differences between the Kerberos supplied with AFS and "third-party"
Kerberos implementations, and migration paths.
- Cross-realm authentication, and how it operates with AFS.
- What "aklog" is, and the role it plays in the authentication process.
- Strategies for making Kerberos authentication as seamless as possible at
your site.
Participants who ask questions about gsslog will be pelted with overripe
fruit.
The day will be 4 90 minute sessions with breaks in the morning and
afternoon, plus a mid-day break for lunch [which will be provided].
Attendance is limited to 60 people.
Current Attendees are:
- Thomas Kula
- Bram Vogelaar
- Hugo Meiland
- Rodney Dyer
- Tracy Di Marco White
- Terry McCoy
- Michele Decker
- Jim Durand
- Eldon Norton
- Ray Pasetes
- Giovanni Bracco
- Pietro D'Angelo
- Cesar Garcia
- Kurt Seiffert
- Michael Polek
- Francesco Taurino
- Joseph Vilas
- Steve Shipway
- Matt Cocker
- Eric Chung
- Ted Creedon
- Mee-You Lee
- Russ Allbery
- Andrew May
- Eriko Nurvitadhi
- Brian Davidson
- Rich Sudlow
- Celeste Copeland
- Sandro Angius
- Enrico Fasanelli
- Kris Webb
- Prasad Dharmasena
- Alexander Latimer
- Glenn Wolosh
- Kim Kimball
- Bethlynn Eicher
- Paul Mazaitis
- Robert O'Meara
- Robert McDivett
- Jonathan Billings
- Eizan Miyamoto
- Philip Dye
- Robert Smith
- Longjiang Yang
- D'arcy MacIsaac
- Tom Link
- Charles Huppmann
- Derek Morr
- Haichuan Yang
- Matt Benjamin
- Alf Wachsmann
- Claudio Soprano
- DJ Byrne
- Wei-Gung Sun
- Jeff D'Angelo
- Renata Dart
- Duncan Hutty
- Chad Ziccardi