Speaker
E.M.V. Fasanelli
(I.N.F.N.)
Description
The infn.it AFS cell has been providing a useful single file-space and authentication mechanism for the whole
INFN, but the lack of a distributed management system, has lead several INFN sections and LABs to setup local
AFS cells. The hierarchical transitive cross-realm authentication introduced in the Kerberos 5 protocol and the
new versions of the OpenAFS and MIT implementation of Kerberos 5, make possible to setup an AFS cross cell
authentication in a transparent way, using the Kerberos 5 cross-realm one. The goal of the K5 @ INFN.IT
project is to provide a Kerberos 5 authentication infrastructure for the INFN and cross-realm authentication
to be used for the cross cell AFS authentication. In this work we describe the scenario, the results of various
tests performed, the solution chosen and the status of the K5 @ INFN.IT project.
Author
E.M.V. Fasanelli
(I.N.F.N.)
