+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+ "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html>
+ <head>
+ <title>Petter Reinholdtsen: entries from April 2010</title>
+ <link rel="stylesheet" type="text/css" media="screen" href="../../../style.css">
+ <link rel="alternate" title="RSS Feed" href="04.rss" type="application/rss+xml">
+ </head>
+ <body>
+<!-- XML FEED -->
+
+ <div class="title">
+ <h1>
+ <a href="../../../">Petter Reinholdtsen</a>
+
+ </h1>
+
+ </div>
+
+ <p>Entries from April 2010.</p>
+
+
+<div class="entry">
+ <div class="title">
+ <a href="../../../Kerberos_for_Debian_Edu_Squeeze_.html">Kerberos for Debian Edu/Squeeze?</a>
+ </div>
+ <div class="date">
+ 2010-04-14 17:20
+ </div>
+
+ <div class="body">
+
+<p><a href="http://www.nuug.no/aktiviteter/20100413-kerberos/">Yesterdays
+NUUG presentation</a> about Kerberos was inspiring, and reminded me
+about the need to start using Kerberos in Skolelinux. Setting up a
+Kerberos server seem to be straight forward, and if we get this in
+place a long time before the Squeeze version of Debian freezes, we
+have a chance to migrate Skolelinux away from NFSv3 for the home
+directories, and over to an architecture where the infrastructure do
+not have to trust IP addresses and machines, and instead can trust
+users and cryptographic keys instead.</p>
+
+<p>A challenge will be integration and administration. Is there a
+Kerberos implementation for Debian where one can control the
+administration access in Kerberos using LDAP groups? With it, the
+school administration will have to maintain access control using flat
+files on the main server, which give a huge potential for errors.</p>
+
+<p>A related question I would like to know is how well Kerberos and
+pam-ccreds (offline password check) work together. Anyone know?</p>
+
+<p>Next step will be to use Kerberos for access control in Lwat and
+Nagios. I have no idea how much work that will be to implement. We
+would also need to document how to integrate with Windows AD, as such
+shared network will require two Kerberos realms that need to cooperate
+to work properly.</p>
+
+<p>I believe a good start would be to start using Kerberos on the
+skolelinux.no machines, and this way get ourselves experience with
+configuration and integration. A natural starting point would be
+setting up ldap.skolelinux.no as the Kerberos server, and migrate the
+rest of the machines from PAM via LDAP to PAM via Kerberos one at the
+time.</p>
+
+<p>If you would like to contribute to get this working in Skolelinux,
+I recommend you to see the video recording from yesterdays NUUG
+presentation, and start using Kerberos at home. The video show show
+up in a few days.</p>
+
+ </div>
+ <div class="tags">
+
+
+
+ Tags: <a href="../../../tags/debian edu">debian edu</a>, <a href="../../../tags/english">english</a>, <a href="../../../tags/nuug">nuug</a>.
+
+ </div>
+</div>
+ <div class="padding"></div>
+
+ <p style="text-align: right;"><a href="04.rss"><img src="../../../xml.gif" alt="RSS Feed" width="36" height="14"></a></p>
+
+
+
+<div id="sidebar">
+
+<h2>Archive</h2>
+<ul>
+
+<li>2010
+<ul>
+
+<li><a href="../../../archive/2010/01/">January (2)</a></li>
+
+<li><a href="../../../archive/2010/02/">February (1)</a></li>
+
+<li><a href="../../../archive/2010/03/">March (3)</a></li>
+
+<li><a href="../../../archive/2010/04/">April (1)</a></li>
+
+</ul></li>
+
+<li>2009
+<ul>
+
+<li><a href="../../../archive/2009/01/">January (8)</a></li>
+
+<li><a href="../../../archive/2009/02/">February (8)</a></li>
+
+<li><a href="../../../archive/2009/03/">March (12)</a></li>
+
+<li><a href="../../../archive/2009/04/">April (10)</a></li>
+
+<li><a href="../../../archive/2009/05/">May (9)</a></li>
+
+<li><a href="../../../archive/2009/06/">June (3)</a></li>
+
+<li><a href="../../../archive/2009/07/">July (4)</a></li>
+
+<li><a href="../../../archive/2009/08/">August (3)</a></li>
+
+<li><a href="../../../archive/2009/09/">September (1)</a></li>
+
+<li><a href="../../../archive/2009/10/">October (2)</a></li>
+
+<li><a href="../../../archive/2009/11/">November (3)</a></li>
+
+<li><a href="../../../archive/2009/12/">December (3)</a></li>
+
+</ul></li>
+
+<li>2008
+<ul>
+
+<li><a href="../../../archive/2008/11/">November (5)</a></li>
+
+<li><a href="../../../archive/2008/12/">December (7)</a></li>
+
+</ul></li>
+
+</ul>
+
+
+
+<h2>Tags</h2>
+<ul>
+
+ <li><a href="../../../tags/3d-printer">3d-printer (11)</a></li>
+
+ <li><a href="../../../tags/amiga">amiga (1)</a></li>
+
+ <li><a href="../../../tags/aros">aros (1)</a></li>
+
+ <li><a href="../../../tags/debian">debian (14)</a></li>
+
+ <li><a href="../../../tags/debian edu">debian edu (13)</a></li>
+
+ <li><a href="../../../tags/english">english (21)</a></li>
+
+ <li><a href="../../../tags/fiksgatami">fiksgatami (1)</a></li>
+
+ <li><a href="../../../tags/fildeling">fildeling (5)</a></li>
+
+ <li><a href="../../../tags/kart">kart (2)</a></li>
+
+ <li><a href="../../../tags/lenker">lenker (1)</a></li>
+
+ <li><a href="../../../tags/ltsp">ltsp (1)</a></li>
+
+ <li><a href="../../../tags/multimedia">multimedia (5)</a></li>
+
+ <li><a href="../../../tags/norsk">norsk (64)</a></li>
+
+ <li><a href="../../../tags/nuug">nuug (68)</a></li>
+
+ <li><a href="../../../tags/opphavsrett">opphavsrett (11)</a></li>
+
+ <li><a href="../../../tags/personvern">personvern (10)</a></li>
+
+ <li><a href="../../../tags/reprap">reprap (10)</a></li>
+
+ <li><a href="../../../tags/rss">rss (1)</a></li>
+
+ <li><a href="../../../tags/sikkerhet">sikkerhet (5)</a></li>
+
+ <li><a href="../../../tags/standard">standard (11)</a></li>
+
+ <li><a href="../../../tags/stavekontroll">stavekontroll (1)</a></li>
+
+ <li><a href="../../../tags/video">video (10)</a></li>
+
+ <li><a href="../../../tags/vitenskap">vitenskap (1)</a></li>
+
+ <li><a href="../../../tags/web">web (5)</a></li>
+
+</ul>
+
+</div>
+</body>
+</html>
projects / homepage.git / commitdiff