MEETING INTRODUCTION
Kerberos provides secure login facilities for Unix, Linux and Windows. Our speaker for this month's Kerberos meeting (and the planned OpenAFS meeting) will be Jeff Altman. Unigroup members will remember that Jeff is a past Unigroup speaker (of Kermit95 and Telnet Security Working Group fame). Jeff has been working with a series of well known security related projects for many years.
MIT Kerberos Version 5 is the basis for the Kerberos distributed with Solaris, AIX, HP-UX, Red Hat Linux, Debian, MacOS X, OpenVMS, and just about every other Kerberos distribution other than the Heimdal distribution and the implementation built into Microsoft Windows 2000 and subsequent releases. MIT is directly responsible for three Kerberos products:
http://web.mit.edu/kerberos/
The MIT Kerberos 5 release 1.3.3 release fixes bugs and adds one major feature:
In addition to developing the leading open source implementation of Kerberos, the MIT Kerberos Development Group contributes more than half of the document authors within the IETF Kerberos Working Group. MIT's participation has been crucial to ensuring that all of the major implementations of Kerberos (including Microsoft's) adhere to the published standards to facilitate interoperability.
This talk will provide an introduction to the Kerberos 5 authentication protocol; a detailed overview of the MIT Kerberos implementation; a discussion of interoperability concerns which developers and administrators face when implementing and deploying a multi-platform Kerberos infrastructure; and some demonstrations utilizing the GSS on Linux, Windows, and Java.
Note:
If your organization would be interested in providing a grant
to further Kerberos development at MIT. Please contact
Marshall Vale, Team Leader, of The MIT Kerberos Team, at
krbcore
SPECIAL INSTRUCTIONS: --------------------- While RSVPs will NOT be required for this location, please RSVP if you know you are attending, or if there is a high probability that you will be attending. This will help us determine the correct amount of food and refreshments. Please RSVP by two days prior to the meeting day (the food must be ordered in advance). To REGISTER for this event, please RSVP by using the Unigroup Registration Page. This will allow us to have some automation in the registration process. Please continue to check the Unigroup web site and THIS page, for any last minute updates concerning this meeting. If you registered for this meeting, please check your email for any last minute announcements as the meeting approaches.
DIRECTIONS
Alliance for Downtown NY Conference Facility 104 Washington Street Wall Street Area Downtown, New York City
This building is located on the West side of the street. Cross Streets: Between Rector (South) and Carlisle (North) Streets.
Our meeting location is in the Lower West Corner of Downtown, North of the Battery Tunnel, South of the Downtown Hotel, East of West Street, and West of Greenwich Street. Walking West on Rector Street from Broadway, you pass Church, Greenwich then Washington Streets.
There are multiple blocks of parking lots right there, between Washington and Greenwich Streets, starting at the Battery Tunnel and extending North for a number of blocks.
Nearest mass transit stations, in order, are the '1/9' (Rector Street), 'R/W' (Rector Street) and the '4/5' (Wall Street).
PRESENTATION OUTLINE
In this talk, Jeffrey Altman, from Secure Endpoints Inc., will discuss the Kerberos 5 trusted third party implementation.
The topics will include:
The slides for this Kerberos talk may be downloaded from:
http://www.secure-endpoints.com/talks/unigroup-20040520.pdf
Web Resources:
--------------
Kerberos: The Network Authentication Protocol
http://web.mit.edu/kerberos/
The MIT Kerberos Team
http://web.mit.edu/kerberos/www/krbdev.html
The Kerberos Network Authentication Service
http://gost.isi.edu/info/kerberos/
Kerberos FAQ
http://www.nrl.navy.mil/CCS/people/kenh/kerberos-faq.html
Step-by-Step Guide to Kerberos 5 Interoperability
http://www.microsoft.com/windows2000/techinfo/planning/security/kerbsteps.asp
(other Kerberos links are also on this page)
SPEAKER BIOGRAPHY
Jeffrey Altman, is the President of Secure Endpoints Inc., and is is a long time open source developer and participant in the Internet Engineering Task Force. Jeffrey's current projects and roles include:
COMPANY BIOGRAPHY
Secure Endpoints Inc. specializes in providing support and new development for open source products on the Microsoft Windows 2000/XP/2003 family of products.
GIVEAWAYS
O'Reilly has been kind enough to provide us with some of their books, which we will continue to raffle off as giveaways at our meetings.
Addison-Wesley Professional/Prentice Hall PTR has been kind enough to provide us with some of their books, which we will continue to raffle off as giveaways at our meetings. Addison-Wesley also has a new end-user discount, available through their User Group program. We will be announcing the details at our next meeting!
Unigroup would like to thank both companies for the support provided by their User Group programs.
Note: The chances tend to be about 1 in 5, that any attendee of our meeting will walk away with a fairly valuable giveaway (ie. many of these books are valued between $30 and $60)!
Novell has provided us with some SuSE Linux Distributions.
IBM has provided us with some IBM Tote Bags and Linux Penguins.
FEE SCHEDULE
Yearly Membership (includes all meetings): $ 50.00
* Non-Member Single Meeting: $ 20.00
Student Yearly Membership: $ 20.00
Non-Member Student Single Meeting (with ID): $ 5.00
Cash, Check, American Express.
FOOD AND REFRESHMENTS
Complimentary Food and Refreshments will be served. This includes sandwiches such as turkey, roast beef, chicken, tuna and grilled vegetables as well as cookies, bottled water and assorted beverages.
Please join us for this meeting, you won't want to miss it!
unilist