From:	MERC::"uunet!CRVAX.SRI.COM!RELAY-INFO-VAX" 15-OCT-1992 21:47:23.58
To:	bill@bill.ab.umd.edu
CC:	MARTIN@pebble.wharton.upenn.edu, info-vax@kl.sri.com
Subj:	Re: KERBEROS as replacement for SYSUAF

> In the mean time I had investigated writing a custom LOGINOUT that would use
> Kerberos for authentication - yuck!  I think the idea of replacing the related
> system services is a much more elegant solution.  I would be interested in any
> work along these lines.  If we could get enough people interested we could
> do it as a group project.  I would be glad to do some of the work, but I don't
> want to do it all if I can help it.

> >> ... and arrange to discuss the issues with
> >> the other people who have worked on related projects.

> Nobody at DEC admits to working on, thinking about, or taking seriously the
> question of network security.  If there are any "related projects" inside or
> outside of DEC I have been unable to locate them.


Hi Bill,

We have ported the MIT Kerberos Libraries to VMS and have a patched
LOGINOUT that will speak to our Kerberos servers.  We do not have a
change password mechanism in place because we are using AFS Kerberos and
it does not use the same mechanism as MIT Kerberos.

We are not yet running this in production yet, but have been testing it.
 I can put you in contact with the person doing the work here, if you
like.


	jeff

---
Jeffrey James Bryan Carpenter

System and Networks,Computing and Information Srvcs.,University of Pittsburgh
600 Epsilon Drive, Pittsburgh, Pennsylvania 15238-2887
jjc+@pitt.edu, jjc@pittvms.bitnet, +1 412 624 6424, FAX +1 412 624 6436