Kerberos upgrades: rekeying the krbtgt

Kerberos is the University’s Single Sign On system, which underpins other services such as WebAuth and Shibboleth. ¬†Most members of the University don’t use it directly, but indirectly use it every day. After something of a delay, we are continuing … Continue reading

Posted in Service Improvement | Tagged , | Leave a comment

Shibboleth Identity Provider upgrades

After some slight prompting by both the Networks team and colleagues in Sysdev, the IAM team felt that we should write some blog posts of our own about our own work to upgrade the University’s authentication infrastructure.¬† The first of … Continue reading

Posted in Service Improvement | Tagged , , | Leave a comment

Kerberos upgrades: kdc-admin

kdc-admin is the master server in our Kerberos realm – it’s the server that account changes happen on, and where password resets happen. The data is then propagated to the slave KDCs every 5 minutes. Upgrading this critical system will … Continue reading

Posted in Service Improvement | Tagged , | Leave a comment

Kerberos upgrades

Prompted by our colleagues in the Networks team, we will be posting a series of blog entries about the work that we’re currently undertaking to improve the University’s Kerberos infrastructure. What is Kerberos? I’m not going to try and explain … Continue reading

Posted in Service Improvement | Tagged , | Leave a comment