[clue-tech] Samba Authentication

[Dan Poler]

On Thu, 2007-10-18 at 01:02 -0600, Nate Duehr wrote:

> Kerberos was created by MIT students on crack, apparently. Making it  
> both smart and at the same time, absolutely insane to deploy on a  
> large scale.  Gotta love MIT.  Both are quite good case studies for  
> lack of KISS and "over-engineered".)

Speaking as someone who is a user of a large-scale Kerberos deployment
on a daily basis, it's actually come a long way in the past five years
or so - it's a lot easier to deploy and manage than it used to be; it's
commonly used in conjunction with LDAP -- LDAP for the account
management, Kerberos for the auth piece. 

That being said, you do not want to be in the position of trying to
migrate an existing infrastructure to Kerberos -- but designing and
deploying one from the ground up is much easier than it used to be.

dap

-- 
Dan Poler, RHCE
Senior Consultant
Red Hat, Inc.
E-Mail: dpoler at redhat.com

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://cluedenver.org/pipermail/clue-tech/attachments/20071018/ffe773c3/attachment-0002.bin