Kerberos upgrades: rekeying the krbtgt

Posted on 2017-01-05 by Michael Howe

Kerberos is the University’s Single Sign On system, which underpins other services such as WebAuth and Shibboleth.  Most members of the University don’t use it directly, but indirectly use it every day. After something of a delay, we are continuing … Continue reading →

Posted in Service Improvement | Tagged , | Comments Off on Kerberos upgrades: rekeying the krbtgt

Kerberos upgrades: kdc-admin

Posted on 2015-07-02 by Michael Howe

kdc-admin is the master server in our Kerberos realm – it’s the server that account changes happen on, and where password resets happen. The data is then propagated to the slave KDCs every 5 minutes. Upgrading this critical system will … Continue reading →

Posted in Service Improvement | Tagged , | Comments Off on Kerberos upgrades: kdc-admin

Kerberos upgrades

Posted on 2015-06-02 by Michael Howe

Prompted by our colleagues in the Networks team, we will be posting a series of blog entries about the work that we’re currently undertaking to improve the University’s Kerberos infrastructure. What is Kerberos? I’m not going to try and explain … Continue reading →

Posted in Service Improvement | Tagged , | Comments Off on Kerberos upgrades