Use ssh key to acquire TGT?

[Christopher D. Clausen]

Russ Allbery <rra at stanford.edu> wrote:
> Adam Megacz <megacz at hcoop.net> writes:
>> "Christopher D. Clausen" <cclausen at acm.org> writes:
>>> UIUC has AFS?  Is there some other UIUC that I don't know about?
>
>> Hrm, I was going by the fact that ncsa.uiuc.edu and acm.uiuc.edu are
>> both in the CellServDB that comes with OpenAFS (and appear to work),
>> but I guess those might be sub-campus-level entities.
>
> I believe NCSA bears a similar relationship to UIUC as SLAC does to
> Stanford, with complications for public vs. private institutions.

Acm.uiuc.edu ( http://www.acm.uiuc.edu/ ) is a group run almost entirely 
by volunteer students.  Fewer than 300 UIUC users have accounts on those 
systems and an even smaller number of those accounts are actually 
active.  ACM at UIUC is about as unofficial as it gets at U of I.

NCSA is basically seperate from the University of Illinois.  It just 
happens to be physically located on campus, but the networking and 
management are under completely different administrative control.

NCSA.EDU might be a good intermediary realm.  I suspect that they might 
have realms trusts with a variety of partner orgranizations for various 
research computer clusters.  But I wouldn't know for sure.  There are 
quite a few realms listed in the default krb5.conf file:
http://www.ncsa.uiuc.edu/UserInfo/Resources/Software/kerberos/krb5.conf 
Its possible that those realms are not involved in any trusts what so 
ever though.

<<CDC