You are here

KDC upgrade to 1.9

Project ID: 
223
Current stage: 
Manager: 
Unit: 
What: 

Description: Test kerberos version 1.9.x KDCs. Add any additional configuration hooks required. Upgrade the INF and IFRIEND KDCs.

Deliverables: Version 1.9.x KDCs. Ideally add password strength checks.

Why: 

Customer: All

Case statement: There are two drivers for this:


  1. The version of kerberos that comes with SL6 is 1.9.something, so we would have to do this work anyway
  2. We would like to use the additional "pwqual" plugin to enhance our password strength checks
When: 

Status:

Timescales: Best to allow three weeks for thorough testing, master-side in particular.

Priority: Required as part of the inf-unit's SL6 upgrade path.

Time:

How: 

Proposal:

Resources:

Plan: Slave-side should be reasonably straightforward. Master-side will require a test realm to be set up. Phasing into service should be done cautiously.

Other: 

Dependencies: This project doesn't depend on anything else. Lots of things do depend on it.

Risks: We have to make this work if we are to be able to upgrade the KDCs to SL6. OTOH there's no reason to expect that there'll be any real problem. However, BEWARE of breaking AFS, as it still requires single-DES keys.

URL: http://www.dice.inf.ed.ac.uk/units/infrastructure/Projects/168-PWstrengt...

Milestones

Proposed date Achieved date Name Description