Upgrade to the Latest Version of MIT Kerberos on RHEL3.1
James McDonald
james
Sun Aug 28 17:23:41 PDT 2005
Aaron Grewell wrote:
>On Wednesday 10 August 2005 21:25, A. Khattri wrote:
>
>
>>On Wed, 10 Aug 2005, Net Llama! wrote:
>>
>>
>>>On 08/10/2005 05:41 PM, James McDonald wrote:
>>>
>>>
>>>>I have a Redhat Enterprise Linux Box at work which I have winbind
>>>>authentication running successfully to handle remote logins via a
>>>>kerberised version of telnet which is at version:
>>>>
>>>>
>>Wow, I thought everyone knew how insecure telnet is...
>>
>>
>
>Thus the 'kerberised' bit. Correctly configured, Kerberos encrypts both
>authentication and payload of a telnet session, in addition to providing
>single sign on. This can also be done with SSH, but it's much more complex.
>Given an existing Kerberos environment Telnet is quite a bit simpler while
>retaining a comparable level of security.
>
>I went through a similar upgrade to the Kerberos modules on RHEL3 to make it
>compatible with MS Kerb, and used the same direct-overwrite method from
>source. Kerberos libs are linked to so many things that even when you've got
>RPMS they won't upgrade due to version requirements of other packages.
>Trying to upgrade Kerb via RPM was a one-way ticket to Dependency Hell on the
>one system I tried it on. The upgrade to RHEL 4 is easier, and includes a
>nice recent Kerb implementation. I've been down the other road, and I
>recommend a full distro upgrade here if it's an option for you. Really.
>
>
>
Hey thanks for the info. I think the whole dependency hell thing sux...
Grumble we have QAD and it's only `certified' for RHEL3.x
More information about the Linux-users
mailing list