*BSD News Article 36043


Return to BSD News archive

Path: sserve!newshost.anu.edu.au!harbinger.cc.monash.edu.au!bunyip.cc.uq.oz.au!munnari.oz.au!spool.mu.edu!sdd.hp.com!svc.portal.com!uunet!news.oec.com!outland.oec.com!doyle
From: doyle@OEC.COM (Jim Doyle)
Newsgroups: comp.unix.bsd
Subject: Re: Kerberized RPC?
Date: 18 Sep 1994 02:49:58 GMT
Organization: Open Environment Corporation
Lines: 21
Message-ID: <35g9sm$9sv@exile.oec.com>
References: <UiR=XtC00UoQMHlccP@andrew.cmu.edu>
NNTP-Posting-Host: outland.oec.com
X-Newsreader: TIN [version 1.2 PL2]

: Does anyone know if there's a Kerberized RPC out there, or do I need to
: build such a beast myself?

The code for Kerberos authentication is neither in included in the
latest ONC RPC release nor SunRPC 4.0.  It has been done, however, a
designator of AUTH_KERB has been reserved and I have seen support for
it floating around the Solaris headers.

Interestingly enough, I happen to have a release tree for Transarc Rx
that has been blessed for free-redistribution. Rx is the RPC library
used to implement AFS ; it uses AFS Kerberos to provide endpoint
authentication, message integrity guarantees and even wire encryption.
You could use the Rx code as a skeleton to get your SunRPC port 
underway. Let me know if this would help.

I had been wanting to add K5 authentication to Sun RPC, but simply have
not had the time due to my job.

-- Jim Doyle