Kerberos upgrades: rekeying the krbtgt

Kerberos is the University’s Single Sign On system, which underpins other services such as WebAuth and Shibboleth. ┬áMost members of the University don’t use it directly, but indirectly use it every day. After something of a delay, we are continuing … Continue reading

Posted in Service Improvement | Tagged , | Leave a comment

Kerberos upgrades: kdc-admin

kdc-admin is the master server in our Kerberos realm – it’s the server that account changes happen on, and where password resets happen. The data is then propagated to the slave KDCs every 5 minutes. Upgrading this critical system will … Continue reading

Posted in Service Improvement | Tagged , | Leave a comment

Kerberos upgrades

Prompted by our colleagues in the Networks team, we will be posting a series of blog entries about the work that we’re currently undertaking to improve the University’s Kerberos infrastructure. What is Kerberos? I’m not going to try and explain … Continue reading

Posted in Service Improvement | Tagged , | Leave a comment