UKUUG Spring 2009 Conference
24-26 March 2009 in London
Kerberos Training Tutorial (Tutor: Simon Wilkinson)
This year's Kerberos training tutorial will be presented in two parts. The morning's session will be aimed at users without any particular Kerberos knowledge, but with an interest in deploying a site-wide authentication solution. We'll cover the basics of the Kerberos protocol, examine common deployment considerations and discuss realm administration strategies. Suggestions will be made for methods of Kerberising many popular applications, and we'll touch upon the issues involved in controlling delegation and key type management.
The afternoon's session will look at a series of more advanced topics. It will be targetted at those who have either attended the morning session, or who already have a good working knowledge and deployment of Kerberos. We'll look at the issues involved in running Kerberos across many different platforms, the challenges presented by mobile devices, and at extending Kerberos single sign on to the web. We'll discuss the issues involved in rekeying existing Kerberos realms, and look at mechanisms for adding Kerberos support to existing local code and protocols. A number of methods of making interactions with Kerberos appear seamless from the user's perspective will be presented, and ways of leveraging Kerberos into the world of public key certificates will be discussed. Finally, there will be an opportunity for attendees to get advice and feedback both from the tutor and other attendees on particular issues facing their site.
About the tutor
Simon works as a Computing Officer for the Division of Informatics at the University of Edinburgh. He was one of the original design team for their DICE computing architecture, with particular emphasis on the authentication, authorization and directory services portions of that design.
As part of this work, Simon has been heavily active within the Kerberos community. He completed the first implementation of GSSAPI support for OpenSSH, and was involved in the standardisation efforts for these extensions. He has also implemented Kerberos support for Jabber (including the Jabberd2 server, Gaim, Psi and AdiumX clients) and Thunderbird.
Simon now works heavily with OpenAFS, a globally distributed network filesystem, which uses Kerberos as the basis for its authentication system.
PO BOX 37
Buntingford
Herts
SG9 9UQ More information