KTH-krb
*******

Introduction
************

¤³¤ÎÊ¸½ñ¤Ï¡¢¥¹¥¦¥§¡¼¥Ç¥ó¤Î¥¹¥È¥Ã¥¯¥Û¥ë¥à²¦Î©µ»½Ñ¸¦µæ½ê(Kungliga Tekniska
H^Kskolan)¤«¤éÇÛÉÛ¤µ¤ì¤ëKerberos4¤Ë¤Ä¤¤¤ÆÊ¸½ñ²½¤ò»î¤ß¤¿¤â¤Î¤Ç¤¹¡£¤³¤ÎÇÛÉÛ
ÈÇ¤ÏeBones¤ò´ð¤Ë¤·¤Æ¤Þ¤¹¤¬¡¢¿§¡¹¤Ê²þÎÉ¤¬¤µ¤ì¤Æ¤¤¤Þ¤¹¡£¤³¤Î¥×¥í¥°¥é¥à¤Ï¡¢
¤´¤¯ºÇ¶á¤ÎUNIX¸ß´¹¥·¥¹¥Æ¥à¤Ç¤¢¤ì¤Ð¤É¤³¤Ç¤âÆ°¤¯¤Ï¤º¤Ç¤¹¡£

UNIX¤Ë²Ã¤¨¤Æ¡¢°Ê²¼¤Î¥×¥é¥Ã¥È¥Û¡¼¥à¤Ç¤âÉôÊ¬Åª¤Ë¤ÏÆ°ºî¤·¤Þ¤¹¡§

   * OS/2¡¢EMX¤¬É¬Í×¡£

   * Windows 95/NT¡¢gnu-win32 ¤¬É¬Í×(¤¤¤¯¤Ä¤«¤ÎËâË¡¤Î¥é¥¤¥Ö¥é¥ê¡¼¤Ï
     Microsoft C ¤Ç¥³¥ó¥Ñ¥¤¥ë¤·¤¿¤Û¤¦¤¬ÎÉ¤¤)¡£

´ðËÜÅª¤Ë¤Ï¡¢ANSI C ¥³¥ó¥Ñ¥¤¥é¤È¡¢dbm¥é¥¤¥Ö¥é¥ê¡Ê¥µ¡¼¥ÐÂ¦¡Ë¤È¡¢ BSD
¥½¥±¥Ã¥È¤Î¤¢¤ë POSIX ½àµò¤Î¥·¥¹¥Æ¥à¾å¤Ç¤¢¤ì¤ÐÆ°ºî¤¹¤ë¤Ï¤º¤Ç¤¹¡£

¥¦¥§¥Ö¥Ú¡¼¥¸¤¬ <http://www.pdc.kth.se/kth-krb/> ¤Ë¤¢¤ê¤Þ¤¹¤Î¤Ç¤´ÍøÍÑ
²¼¤µ¤¤¡£

Bug reports
===========

¤â¤·¡¢¥×¥í¥°¥é¥à¤ò¹½ÃÛ¤Ç¤­¤Ê¤«¤Ã¤¿¤ê¡¢¹½ÃÛ¤·¤¿¥×¥í¥°¥é¥à¤¬»×¤¦¤è¤¦¤ËÆ°¤«
¤Ê¤«¤Ã¤¿¤ê¤·¤¿¾ì¹ç¤Ï¡¢¥Ð¥°¥ì¥Ý¡¼¥È¤òÁ÷¤Ã¤Æ²¼¤µ¤¤¡£¥Ð¥°¥ì¥Ý¡¼¥È¤ÎÁ÷¤êÀè¤Ï
`<kth-krb-bugs@pdc.kth.se>'¤Ë¤·¤Æ²¼¤µ¤¤¡£É¬¤º¡¢¤É¤¦¤¤¤¦¥Þ¥·¥ó¤È¥ª
¥Ú¡¼¥ì¥Æ¥£¥ó¥°¡¦¥·¥¹¥Æ¥à(¥Ð¡¼¥¸¥ç¥ó¤â)¤È¤Ç¥×¥í¥°¥é¥à¤òÁö¤é¤»¤¿¤«¤È¡¢²¿¤¬
µ¯¤­¤Æ¤½¤ì¤Ë¤Ä¤¤¤Æ¤É¤Î¤è¤¦¤Ê¤³¤È¤¬µ¯¤³¤Ã¤Æ¤¤¤¿¤È»×¤¦¤«¤È¡¢¤½¤ì¤òºÆ¸½¤¹¤ë
¤¿¤á¤ÎÎã¡¢¤ª¤è¤Ó¡¢¤½¤ÎÎã¤ò¼Â¹Ô¤·¤¿»þ¤Î½ÐÎÏ¤òÉÕ¤±¤Æ²¼¤µ¤¤¡£¤½¤ì¤«¤é¡¢¤â¤·¡¢
¤½¤ÎÌäÂê¤ËÂÐ¤¹¤ë¥Ñ¥Ã¥Á¤¬¤¢¤ì¤Ð¤½¤ì¤â´Þ¤à¤á¤¿¾ðÊó¤ò²¼¤µ¤¤¡£¤¹¤Ù¤Æ¤Î¥Ñ¥Ã¥Á
¤Ï`diff -u'¤«`diff -c'¤Çºî¤Ã¤Æ²¼¤µ¤¤¡£¥Ð¥°¥ì¥Ý¡¼¥È¤¬¤è¤ê¾ÜºÙ¤Ç
¤¢¤ì¤Ð¡¢¤½¤ÎÊ¬¡¢¤è¤êÁá¤¯²æ¡¹¤â¤½¤ì¤òºÆ¸½¤·¡¢Íý²ò¤·¡¢½¤Àµ¤¹¤ë¤³¤È¤¬¤Ç¤­¤Þ
¤¹¡£

¥Ð¥°¥ì¥Ý¡¼¥È°Ê³°¤Î½õ¸À¤ä¥³¥á¥ó¥È¤Ê¤É¤â´¿·Þ¤·¤Þ¤¹¡£Á÷¤êÀè¤Ï¡¢
`<kth-krb@nada.kth.se>' ¤Ç¤¹¡£

What is Kerberos?
*****************

     Now this Cerberus had three heads of dogs,
             the tail of a dragon, and on his back the
             heads of all sorts of snakes.
             -- Pseudo-Apollodorus Library 2.5.12

¥±¥ë¥Ù¥í¥¹(Kerberos)
¤Ï¥Í¥Ã¥È¥ï¡¼¥¯¾å¤Ç¥æ¡¼¥¶¤È¥µ¡¼¥Ó¥¹¤òÇ§¾Ú¤¹¤ë¤¿¤á¤Î¥·¥¹¥Æ¥à¤Ç¤¹¡£¤½¤Î¥·¥¹¥Æ¥à¤Ï¥Í¥Ã¥È¥ï¡¼¥¯¤¬
"°ÂÁ´¤Ç¤Ê¤¤"
¤È¤¤¤¦²¾Äê¤Ë¤¿¤Ã¤ÆÃÛ¤«¤ì¤Æ¤¤¤Þ¤¹¡£¤¿¤È¤¨¤Ð¡¢¥Í¥Ã¥È¥ï¡¼¥¯¤ò±Û¤¨¤ÆÁ÷¤é¤ì¤¿¥Ç¡¼¥¿¤ÏÈ´¤­¼è¤é¤ì¤¿¤ê¡¢ÊÑ¹¹¤µ¤ì¤¿¤ê¡¢¥¢¥É¥ì¥¹¤òµ¶¤é¤µ¤ì¤¿¤ê¤¹¤ë¤³¤È¤¬¤¢¤êÆÀ¤Þ¤¹¡£¤½¤ì¤æ¤¨¡¢¥Í¥Ã¥È¥ï¡¼¥¯¤ò±Û¤¨¤¿¥Ç¡¼¥¿¤òÇ§¾ÚÌÜÅª¤Ë»È¤¦¤³¤È¤Ï¤Ç¤­¤Þ¤»¤ó¡£

¥±¥ë¥Ù¥í¥¹¤Ï¿®Íê¤Ç¤­¤ëÂè»°¼Ôµ¡´Ø¤Î¥µ¡¼¥Ó¥¹(a trusted third-party
service)¤Ç¤¹¡£¤³¤ì¤Ï¡¢¥Í¥Ã¥È¥ï¡¼¥¯¾å¤Î¤¹¤Ù¤Æ¤Î¼ÂÂÎ(entities:¥æ¡¼¥¶¤È¥µ¡¼¥Ó¥¹¡¢ÄÌ¾ï
"¥×¥ê¥ó¥·¥Ñ¥ë(principals)"¤È¸Æ¤Ð¤ì¤ë)¤Ë¤è¤ê¿®Íê¤µ¤ì¤ëÂè»°¼Ôµ¡´Ø(¥±¥ë¥Ù¥í¥¹¡¦¥µ¡¼¥Ð)¤¬¤¢¤ë¤³¤È¤ò°ÕÌ£¤·¤Þ¤¹¡£
¤¹¤Ù¤Æ¤Î¥×¥ê¥ó¥·¥Ñ¥ë¤Ï¡¢¥±¥ë¥Ù¥í¥¹¡¦¥µ¡¼¥Ð¤ÈÈëÌ©¤Î¥Ñ¥¹¥ï¡¼¥É(¤Þ¤¿¤Ï¸°)¤ò¶¦Í­¤·¡¢¤³¤ì¤Ç¥×¥ê¥ó¥·¥Ñ¥ë¤Ï¥±¥ë¥Ù¥í¥¹¡¦¥µ¡¼¥Ð¤«¤é¤Î¥á¥Ã¥»¡¼¥¸¤¬ËÜÊª¤Ç¤¢¤ë¤³¤È¤ò¾ÚÌÀ¤¹¤ë¤³¤È¤¬²ÄÇ½¤Ë¤Ê¤ê¤Þ¤¹¡£¤³¤¦¤·¤Æ¡¢¥±¥ë¥Ù¥í¥¹¡¦¥µ¡¼¥Ð¡¢¥æ¡¼¥¶¤ª¤è¤Ó¥µ¡¼¥Ó¥¹¤ò¿®Ç¤¤¹¤ë¤³¤È¤Ç¡¢¤ª¸ß¤¤¤òÇ§¾Ú¤·¹ç¤¦¤³¤È¤¬¤Ç¤­¤Þ¤¹¡£

Basic mechanism
===============

¥±¥ë¥Ù¥í¥¹¤ÎÃæ¤Ç¡¢¥×¥ê¥ó¥·¥Ñ¥ë¤ÏÈà¤é¤¬Í×ÀÁ¤ò¤¹¤ëÃ¯¤«¤ËÈà¤é¤Ç¤¢¤ë¤³¤È¤ò¾ÚÌÀ¤¹¤ë¤¿¤á¤Ë
"ÀÚÉä(ticket)" ¤ò»È¤¤¤Þ¤¹¡£¼¡¤ÎÎã¤Ç¤Ï¡¢A
¤ÏÇ§¾Ú¸ò´¹¤Î¥¤¥Ë¥·¥¨¡¼¥¿¡¢ÄÌ¾ï¤Ï¥æ¡¼¥¶¤Ç¡¢¤½¤·¤Æ¡¢B ¤Ï A
¤¬»È¤¤¤¿¤¤¤È´ê¤¦¥µ¡¼¥Ó¥¹¤Ç¤¹¡£

ÆÃÄê¤Î¥µ¡¼¥Ó¥¹¤Î¤¿¤á¤ÎÀÚÉä¤ò¼ê¤ËÆþ¤ì¤ë¤¿¤á¤Ë¡¢A
¤ÏÀÚÉä¤Î°ÍÍê¤ò¥±¥ë¥Ù¥í¥¹¥µ¡¼¥Ð¤ËÁ÷¤ê¤Þ¤¹¡£¤½¤Î°ÍÍê¤Ï´ðËÜÅª¤Ë A¤ÎÌ¾Á°¤È
B¤ÎÌ¾Á°¤È¤ò´Þ¤ó¤Ç¤¤¤Þ¤¹¡£¥±¥ë¥Ù¥í¥¹¡¦¥µ¡¼¥Ð¤Ï A ¤È B
¤ÎÎ¾Êý¤¬ÀµÅö¤Ê¥×¥ê¥ó¥·¥Ñ¥ë¤Ç¤¢¤ë¤³¤È¤ò³ÎÇ§¤·¤Þ¤¹¡£

¥×¥ê¥ó¥·¥Ñ¥ë¤ÎÀµÅöÀ­¤¬¾ÚÌÀ¤µ¤ì¤ë¤È¡¢A ¤È B ¤ÎÌ¾Á°¡¢A
¤Î¥Í¥Ã¥È¥ï¡¼¥¯¥¢¥É¥ì¥¹(A<ADDR>)¡¢¸½ºß¤Î»þ¹ï
(T<ISSUE>)¡¢ÀÚÉä¤Î¼÷Ì¿(LIFE)¡¢¤ª¤è¤Ó¡¢ÈëÌ©¤Î "¥»¥Ã¥·¥ç¥ó¸°" (K<AB>)
¤ò´Þ¤à¥Ñ¥±¥Ã¥È¤òºî¤ê¤Þ¤¹¡£¤³¤Î¥Ñ¥±¥Ã¥È¤Ï B ¤ÎÈëÌ©¸°¤Ç°Å¹æ²½¤µ¤ì¤Þ¤¹
(K<B>)¡£¼ÂºÝ¤ÎÀÚÉä (T<AB>) ¤Ï¼¡¤Î¤è¤¦¤Ë¸«¤¨¤Þ¤¹¡£

({A, B, A<ADDR>, T<ISSUE>, LIFE, K<AB>}K<B>)

A ¤Ø¤ÎÊÖ¿®¤Ï¡¢ÀÚÉä (T<AB>)¡¢B
¤ÎÌ¾Á°¡¢¸½ºß¤Î»þ¹ï¡¢ÀÚÉä¤Î¼÷Ì¿¡¢¤ª¤è¤Ó¡¢¥»¥Ã¥·¥ç¥ó¸°¤Ç¡¢¤¹¤Ù¤Æ A
¤ÎÈëÌ©¸° ({B, T<ISSUE>, LIFE, K<AB>, T<AB>}K<A>) ¤Ç°Å¹æ²½¤µ¤ì¤Þ¤¹¡£A
¤Ï¸å¤Ç»È¤¦¤¿¤á¤Ë¤½¤ÎÊÖ¿®¤ò²òÆÉ¤·ÊÝ»ý¤·¤Þ¤¹¡£

¥á¥Ã¥»¡¼¥¸¤ò B ¤ØÁ÷¤ëÁ°¤Ë¡¢A ¤Ï A ¤ÎÌ¾Á°, A ¤Î¥¢¥É¥ì¥¹, ¸½¹Ô»þ¹ï,
¤ª¤è¤Ó A ¤ËÁª¤Ð¤ì¤¿ "¥Á¥§¥Ã¥¯¥µ¥à"
¤«¤é¤Ê¤ëÇ§¾Ú»Ò¤ò¤Ä¤¯¤ê¤Þ¤¹¡£¤½¤ì¤é¤Ï¡¢¤¹¤Ù¤ÆÈëÌ©¤Î¥»¥Ã¥·¥ç¥ó¸° ({A,
A<ADDR>, T<CURRENT>, CHECKSUM}K<AB>)
¤Ç°Å¹æ²½¤µ¤ì¤Æ¤Þ¤¹¡£¤³¤ì¤Ï¥±¥ë¥Ù¥í¥¹¡¦¥µ¡¼¥Ð¤«¤é B
¤Ë¤è¤Ã¤Æ¼õ¤±¼è¤é¤ì¤ëÀÚÉä¤È¶¡¤ËÁ÷¤é¤ì¤Þ¤¹¡£¼õ¤±¼è¤ëºÝ¤Ë¡¢ B ¤Ï B
¤ÎÈëÌ©¸°¤Ç¤½¤ÎÀÚÉä¤Î°Å¹æ¤ò²òÆÉ¤·¤Þ¤¹¡£¤½¤ÎÀÚÉä¤Ë¤Ï¡¢Ç§¾Ú»Ò¤ò°Å¹æ²½¤·¤¿¥»¥Ã¥·¥ç¥ó¸°¤¬´Þ¤Þ¤ì¤Æ¤¤¤ë¤Î¤Ç¡¢¤³¤³¤Ç
B ¤Ï°Å¹æ²½¤µ¤ì¤¿Ç§¾Ú»Ò¤ò²òÆÉ¤Ç¤­¤ë¤è¤¦¤Ë¤Ê¤ê¤Þ¤¹¡£A ¤¬ËÜÅö¤Ë A
¤Ç¤¢¤ë¤³¤È¤ò¾ÚÌÀ¤¹¤ë¤¿¤á¤Ë¡¢B
¤Ï¤³¤³¤ÇÀÚÉä¤ÎÆâÍÆ¤ò¤½¤ÎÀÚÉä¤ÎÇ§¾Ú»Ò¤ÈÈæ³Ó¤·¤Ê¤±¤ì¤Ð¤Ê¤ê¤Þ¤»¤ó¡£¤â¤·¤¹¤Ù¤Æ¤¬¹çÃ×¤¹¤ì¤Ð¡¢
B ¤Ï¤³¤³¤Ç¡¢A ¤¬³Î¤«¤ËÇ§¾Ú¤µ¤ì¤¿¤È¹Í¤¨¤Þ¤¹¡£

Different attacks
=================

Impersonating A
---------------

°ì¿Í¤Îµ¶¼Ô C
¤¬¥Í¥Ã¥È¥ï¡¼¥¯¤ò±Û¤¨¤ÆÅ¾Á÷¤µ¤ì¤ëÇ§¾Ú»Ò¤ÈÀÚÉä¤È¤òÅð¤à¤³¤È¤¬¤Ç¤­¡¢¤½¤ì¤ò»È¤Ã¤Æ
A
¤ËÀ®¤ê¤¹¤Þ¤¹¤³¤È¤¬¤Ç¤­¤ë¤È¤·¤Þ¤¹¡£ÀÚÉä¤ÎÃæ¤Î¥¢¥É¥ì¥¹¤ÈÇ§¾Ú»Ò¤¬²Ã¤¨¤é¤ì¤Æ¡¢¤³¤Î¹¶·â¤òÃ£À®¤¹¤ë¤³¤È¤ò¤è¤êÆñ¤«¤·¤¯¤·¤Æ¤Þ¤¹¡£C
¤¬À®¸ù¤¹¤ë¤¿¤á¤Ë¤Ï¡¢A
¤ÈÆ±¤¸¥Þ¥·¥ó¤ò»È¤¦¤«¡¢¥Ñ¥±¥Ã¥È¤Î¥½¡¼¥¹¡¦¥¢¥É¥ì¥¹¤òµ¶¤ëÉ¬Í×¤¬¤¢¤ê¤Þ¤¹¡£Ç§¾Ú»Ò¤Ë»þ¹ï°õ¤ò´Þ¤á¤ë¤³¤È¤Ë¤è¤ê¡¢
C ¤¬¹¶·â¤ò¤¹¤ë¤¿¤á¤Î½½Ê¬¤ÊÍ±Í½¤ÏÌµ¤¯¤Ê¤ê¤Þ¤¹¡£

Impersonating B
---------------

C ¤¬ B ¤Î¥Í¥Ã¥È¥ï¡¼¥¯¡¦¥¢¥É¥ì¥¹¤òµ¶Áõ¤¹¤ë¤³¤È¤¬¤Ç¤­¡¢A ¤¬ B
(Èà½÷)¤Î¿®Ç¤¾õ¤òÁ÷¤ë¤È¡¢C
¤Ï¤½¤ì¤ò¤¿¤ÀÃ±¤Ë¾ÚÌÀ¤¹¤ë¤Õ¤ê¤ò¤¹¤ë¤³¤È¤¬¤Ç¤­¤Þ¤¹¡£C ¤Ë¤Ï B (Èà½÷)¤¬ A
¤Ë¸ì¤ê¤«¤±¤è¤¦¤È¤·¤Æ¤¤¤ë¤³¤È¤¬¤ï¤«¤ê¤Þ¤»¤ó¡£

Defense strategies
==================

¥µ¡¼¥ÐÂ¦¤Ë "¥ê¥×¥ì¡¼¡¦¥­¥ã¥Ã¥·¥å"
¤ò²Ã¤¨¤ë¤³¤È¤Ï²ÄÇ½¤Ç¤·¤ç¤¦¡£¹Í¤¨Êý¤Ï¡¢ºÇ¸å¤Î¿ôÊ¬´Ö¤ËÁ÷¤é¤ì¤¿Ç§¾Ú»Ò¤òÊÝÂ¸¤·¡¢¤½¤¦¤¹¤ë¤È¡¢Ã¯¤«¤¬´û¤Ë»È¤ï¤ì¤¿¥á¥Ã¥»¡¼¥¸¤òºÆÁ÷¤·¤è¤¦¤È¤·¤¿¤È¤­¤Ë¡¢B
¤Ï¤½¤ì¤ò¸¡ÃÎ¤¹¤ë¤³¤È¤¬¤Ç¤­¤Þ¤¹¡£¤³¤ì¤Ï¡¢´öÊ¬¤«(À­Ç½¤Ë´Ø¤·¤Æ¤Û¤È¤ó¤É)¼ÂÍÑÅª¤Ç¤Ê¤¯¡¢Kerberos
4 ¤Ë¤ÏÍ­¤ê¤Þ¤»¤ó¡¨ MIT Kerberos 5 ¤Ï»ý¤Ã¤Æ¤¤¤Þ¤¹¡£

B ¤òÇ§¾Ú¤¹¤ë¤¿¤á¤Ë¡¢A ¤Ï¡¢¥»¥Ã¥·¥ç¥ó¸°¤Ë¥¢¥¯¥»¥¹¤·¤è¤¦¤È¤·¤Æ¤¤¤ë¤Î¤¬ B
¤Ç¤¢¤ë¤³¤È¤ò¾ÚÌÀ¤¹¤ë²¿¤«¤ò B ¤¬
Á÷¤êÊÖ¤¹¤³¤È¤ò°ÍÍê¤¹¤ë¤Ç¤·¤ç¤¦¡£¤³¤ÎÎã¤¬¡¢A
¤¬Ç§¾Ú»Ò¤Î°ìÉô¤È¤·¤ÆÁ÷¤ë¥Á¥§¥Ã¥¯¥µ¥à¤Ç¤¹¡£¤¢¤ëÅµ·¿Åª¤Ê¼ê½ç¤Ï¥Á¥§¥Ã¥¯¥µ¥à¤Ë£±¤ò²Ã¤¨¡¢¤½¤ì¤ò¥»¥Ã¥·¥ç¥ó¸°¤Ç°Å¹æ²½¤·¤Æ
A ¤ËÁ÷¤êÊÖ¤¹¤³¤È¤Ç¤¹¡£ ¤³¤ì¤Ï¡¢"Áê¸ßÇ§¾Ú" ¤È¸Æ¤Ð¤ì¤Þ¤¹¡£

¥»¥Ã¥·¥ç¥ó¸°¤Ï°Å¹æ³ØÅª¥Á¥§¥Ã¥¯¥µ¥à¤ò A ¤È
B¤Î´Ö¤ÇÁ÷¤é¤ì¤ë¥á¥Ã¥»¡¼¥¸¤Ë²Ã¤¨¤ë¤¿¤á¤Ë¤â»È¤¦¤³¤È¤¬¤Ç¤­¤Þ¤¹("¥á¥Ã¥»¡¼¥¸ÊÝÁ´"¤È¤·¤ÆÃÎ¤é¤ì¤Þ¤¹)¡£°Å¹æ²½¤â²Ã¤¨¤é¤ì¤Þ¤¹("¥á¥Ã¥»¡¼¥¸¤ÎÆâÌ©À­")¡£¤³¤ì¤¬¤ª¤½¤é¤¯¤¹¤Ù¤Æ¤Î¾ì¹ç¤Ë¤ª¤¤¤ÆºÇÎÉ¤Î¥¢¥×¥í¡¼¥Á¤Ç¤¹¡£

Further reading
===============

¥±¥ë¥Ù¥í¥¹¤Ë¤Ä¤¤¤Æ¤Î¸µ¤ÎÏÀÊ¸¤Ï¡¢1988 Ç¯¤ÎJennifer Steiner, Clifford
Neuman ¤ª¤è¤Ó Jeffrey I. Schiller ¤Ë¤è¤ë `Kerberos: An Authentication
Service for Open Network Systems' ¤Ç¤¹¡£

¤¢¤Þ¤êµ»½ÑÅª¤Ë¤Ê¤é¤Ê¤¤µ­½Ò¤Ï 1988Ç¯¤Î Bill Bryant ¤Ë¤è¤ë `Designing an
Authentication System: a Dialogue in Four Scenes' ¤Ç¤¹¡£

¤³¤ì¤é¤ÎÂ¾¡¢´ö¤Ä¤«¤ÎÊ¸½ñ¤¬²æ¡¹¤Î¥¦¥§¥Ö¥Ú¡¼¥¸¾å¤Ç¸«¤Ä¤±¤é¤ì¤Þ¤¹¡£

Installing programs
*******************

ÇÛÉÛ¤µ¤ì¤Æ¤¤¤ë¥½¡¼¥¹¥³¡¼¥É¤«¤é¹½ÃÛ¤¹¤ë¤«¡¢¤¢¤ë¤¤¤Ï¡¢¤â¤·¥Þ¥·¥ó¤Ë¹ç¤Ã¤¿¼Â¹Ô¥â¥¸¥å¡¼¥ë(binaries)¤¬ÍÑ°Õ¤µ¤ì¤Æ¤¤¤ì¤Ð¤½¤ì¤ò¥¤¥ó¥¹¥È¡¼¥ë¤¹¤ë¤«¤òÁªÂò¤Ç¤­¤Þ¤¹¡£

¤â¤Á¤í¤ó¡¢¥½¡¼¥¹¤«¤é¤Î¹½ÃÛ¤ò¤ª¾©¤á¤·¤Þ¤¹¤¬¡¢¥³¥ó¥Ñ¥¤¥ëºÑ¤ß¤Î¼Â¹Ô¥â¥¸¥å¡¼¥ë¤ò»È¤Ã¤¿Êý¤¬¤è¤ê´ÊÃ±¤Ç¤¹¡£
¥Þ¥·¥ó¤Ë¹ç¤Ã¤¿¼Â¹Ô¥â¥¸¥å¡¼¥ë¤¬Ìµ¤«¤Ã¤¿¤ê¡¢ÆÃÊÌ¤ÊÀßÄê¤ò¹Ô¤Ê¤¤¤¿¤¤¤Ê¤é¤Ð¡¢¥½¡¼¥¹¤«¤é¥³¥ó¥Ñ¥¤¥ë¤·¤Þ¤¹¡£

Installing from source
======================

¤³¤Î¥½¥Õ¥È¥¦¥§¥¢¤ò¹½ÃÛ¤¹¤ë¤Ë¤Ï¡¢ÇÛÉÛ¤µ¤ì¤¿¥¢¡¼¥«¥¤¥Ö¤òÅ¸³«(un-tar)
¤·¤Æ¡¢`configure' ¥¹¥¯¥ê¥×¥È¤òÁö¤é¤»¤Þ¤¹¡£

Àµ¤·¤¯¥³¥ó¥Ñ¥¤¥ë¤¹¤ë¤¿¤á¤Ë¤Ï¡¢`gcc' ¤Î¤è¤¦¤Ê¡¢ANSI C
¥³¥ó¥Ñ¥¤¥é¤¬É¬Í×¤Ç¤¹¡£Â¾¤Î¥³¥ó¥Ñ¥¤¥é¤Ç¤âÆ°¤­¤Þ¤¹¤¬¡¢¤¢¤Þ¤ê¤Ë¤â¡¢"ANSI
½àµò"
¤ËÀßÄê¤·²á¤®¤ë¤È¡¢°ìÉô¤Î¥³¡¼¥É¤Ç¤Ï¡¢É¸½à¥¤¥ó¥¯¥ë¡¼¥É¡¦¥Õ¥¡¥¤¥ë¤¬¤Ê¤¤¤¿¤á¤Ë¼ºÇÔ¤¹¤ë¤Ç¤·¤ç¤¦¡£

¹½ÃÛ¤ò¸Ä¡¹¤Î¥Ä¥ê¡¼¤Ç¹Ô¤Ê¤¦¤Ë¤Ï¡¢¥Ä¥ê¡¼¤Î´ð¤Î¥Ç¥£¥ì¥¯¥È¥ê¤Ç `configure'
¤òÁö¤é¤»¤Þ¤¹¤¬¡¢Make ¤¬ VPATH
¤òÀµ¤·¤¯Íý²ò¤¹¤ë¤è¤¦¤Ë¤¹¤ëÉ¬Í×¤¬¤¢¤ê¤Þ¤¹¡£GNU Make ¤Ê¤é¤¦¤Þ¤¯¤Ç¤­¤Þ¤¹¡£

Á´¤Æ¤¬¹½ÃÛ¤Ç¤­¤¿¤é(¹½ÃÛ¤ò¤¹¤ë¾ì½ê¤Ë¤è¤ê¿ôÊ¬¤«¤é¤¢¤ë¤¤¤Ï¤â¤Ã¤ÈÄ¹¤¤»þ´Ö¤òÍ×¤·¤Þ¤¹)¡¢`make
install'¤Ë¤è¤ê(root ¤ÇÁö¤é¤»¤Æ)Á´¤Æ¤ò `/usr/athena'
¤Ë¥¤¥ó¥¹¥È¡¼¥ë¤Ç¤­¤Þ¤¹¡£Â¾¤Î¾ì½ê¤Ë¥¤¥ó¥¹¥È¡¼¥ë¤¹¤ë¤³¤È¤â²ÄÇ½¤Ç¤¹¤¬¡¢¤¢¤Þ¤ê¤ª¾©¤á¤·¤Þ¤»¤ó¡£¤â¤·¡¢¤½¤¦¤·¤¿¤±¤ì¤Ð¡¢`configure'
¤Ç `--prefix=/my/path' ¤òÉÕ¤±¤ÆÁö¤é¤»¤Þ¤¹¡£

´ûÄê(default)¤Î¿¶Éñ¤òÊÑ¤¨¤ë¤¿¤á¤Ë¤Ï¡¢configure
¤ÎºÝ¤Ë°Ê²¼¤Î¥ª¥×¥·¥ç¥ó¤ò»ØÄê¤Ç¤­¤Þ¤¹:

`--enable-shared'
     ¶¦Í­¥Ð¡¼¥¸¥ç¥ó¤ÎKerberos¥é¥¤¥Ö¥é¥ê¤òºîÀ®¤·¤Þ¤¹

`--with-cracklib='DIR
     ¥Ñ¥¹¥ï¡¼¥É¤ÎÉÊ¼ÁÀ©¸æ¤Ë cracklib ¤ò»È¤¤¤Þ¤¹ `kadmind'.
     ¤³¤Î¥ª¥×¥·¥ç¥ó¤Ë¤Ï ¥Ñ¥Ã¥Á
     <ftp://ftp.pdc.kth.se/pub/krb/src/cracklib.patch> ¤ÎÅö¤¿¤Ã¤¿
     cracklib ¤¬É¬Í×¤Ç¤¹¡£

`--with-dictpath='DICTPATH
     ¤³¤ì¤Ï cracklib ¤¬»È¤¦¤Ù¤­¥Ç¥£¥ì¥¯¥È¥ê¤Ç¤¹¡£

`--with-socks='DIR
     ¤â¤·¡¢¥Õ¥¡¥¤¥¢¥¦¥©¡¼¥ë¤òÄÌ²á¤µ¤»¤ëÉ¬Í×¤¬¤¢¤ë¾ì¹ç¤Ë¡¢SocksV5
     ¥×¥í¥È¥³¥ë (`RFC 1928') ¤ò»È¤Ã¤Æ¤¤¤ì¤Ð¡¢socks-support
     ¤Ç¹½ÃÛ²ÄÇ½¤Ç¤¹¡£socks5 ¤¬¥¤¥ó¥¹¥È¡¼¥ë¤µ¤ì¤Æ¤¤¤ë¥Ç¥£¥ì¥¯¥È¥ê¤ò DIR
     ¤Ë»ØÄê¤·¤Æ¤¯¤À¤µ¤¤¡£socks
     ¤Ë¤Ä¤¤¤Æ¤Î¤â¤Ã¤È¾Ü¤·¤¤¾ðÊó¤Ï¡¢<http://www.socks.nec.com/>
     ¤ò¤´Í÷²¼¤µ¤¤¡£

`--with-readline='DIR
     ÍúÎò¡¿¹ÔÊÔ½¸¤ò `ftp' ¤ä `kadmin'¤Ç²ÄÇ½¤Ë¤¹¤ë¤Ë¤Ï¡¢¤É¤Î¥Ð¡¼¥¸¥ç¥ó¤Î
     readline »È¤Ã¤Æ¤â¤Ç¤­¤Þ¤¹¡£¤â¤·¡¢readline
     ¤ò¥¤¥ó¥¹¥È¡¼¥ë¤µ¤ì¤Æ¤¤¤Æ¤â¡¢configure
     ¤Ç¤¦¤Þ¤¯¸«¤Ä¤±¤é¤ì¤Ê¤¤¤È¤­¤Ë¤³¤Î¥ª¥×¥·¥ç¥ó¤ò»È¤¤¤Þ¤¹¡£configure ¤Ï
     `libedit'
     ¤âÁÜ¤·¤Þ¤¹¡£¤â¤·¡¢¥é¥¤¥Ö¥é¥ê¤¬¸«¤Ä¤«¤é¤Ê¤¤»þ¤Ï¡¢¥Ð¥ó¥É¥ë¤·¤Æ¤¢¤ë
     `editline' ¤ò»È¤¦¤³¤È¤Ë¤Ê¤ë¤Ç¤·¤ç¤¦¡£

`--with-mailspool='DIR
     ¹½À®¤Î²áÄø¤Ç¡¢¤½¤Î¥Þ¥·¥ó¤¬¼õ¤±¼è¤Ã¤¿¥á¡¼¥ë¤ò¤É¤³¤ËÃù¤á¤Æ¤ª¤¯¤«¤òÆÃÄê¤·¤è¤¦¤È¤·¤Þ¤¹¡£ÂçÄñ¤Ï
     `/usr/spool/mail' ¤« `/var/mail'
     ¤Ç¤¹¡£¤â¤·¡¢¤½¤ì¤¬¤¦¤Þ¤¯µ¡Ç½¤·¤Ê¤«¤Ã¤¿¤ê¡¢°ìÈÌÅª¤Ç¤Ê¤¤¥Ç¥£¥ì¥¯¥È¥ê¤Ë¥á¡¼¥ë¤òÃù¤á¤Æ¤¤¤ë¾ì¹ç¤Ï¡¢¤³¤Î¥ª¥×¥·¥ç¥ó¤ò»È¤Ã¤Æ¡¢¥á¡¼¥ë¡¦¥¹¥×¡¼¥ë¡¦¥Ç¥£¥ì¥¯¥È¥ê¤¬¤¢¤ë¾ì½ê¤ò¼¨¤¹¤³¤È¤¬¤Ç¤­¤Þ¤¹¡£¤³¤Î¥Ç¥£¥ì¥¯¥È¥ê¤Ï
     `popper' ¤Î¤ß¤¬¥¢¥¯¥»¥¹¤·¡¢ `login' »þ¤Ë¥á¡¼¥ë¤ò¥Á¥§¥Ã¥¯¤·¤Þ¤¹¡£

`--with-hesiod='DIR
     `push' ¤Ç¡¢Hesiod ¤Î¥µ¥Ý¡¼¥È¤ò¤·¤Þ¤¹¡£
     ¤³¤Î¥ª¥×¥·¥ç¥ó¤Ë¤è¤ê¡¢¥Ø¥·¥ª¥É¡¦¥é¥¤¥Ö¥é¥ê¤ò»È¤Ã¤Æ¥æ¡¼¥¶¤Î¥á¡¼¥ë¤òÍ¹ÊØ¶É¤ËÃÖ¤³¤¦¤È¤·¤Þ¤¹¡£

`--with-mkey='FILE
     ¿Æ(master)¸°¤ò¤³¤³¤ËÃÖ¤­¤Þ¤¹¡£´ûÄê¤Ç¤Ï¡¢`/.k'¤Ç¤¹¡£

`--with-db-dir='DIR
     ¥±¥ë¥Ù¥í¥¹¡¦¥Ç¡¼¥¿¥Ù¡¼¥¹¤¬ÊÝÂ¸¤µ¤ì¤Æ¤¤¤ë¾ì½ê¤Ç¡¢´ûÄê¤Ç¤Ï
     `/var/kerberos' ¤Ç¤¹¡£

`--without-berkeley-db'
     ¤â¤·¡¢ Berkeley DB ¤¬¥¤¥ó¥¹¥È¡¼¥ë¤µ¤ì¤Æ¤¤¤¿¤È¤·¤Æ¤â¡¢ dbm
     ¤ÎÊý¤¬¹¥¤Þ¤·¤¤¾ì¹ç¤¬¤¢¤ê¤Þ¤¹¡£¤â¤·¡¢¥±¥ë¥Ù¥í¥¹¤ò¤¹¤Ç¤ËÁö¤é¤»¤Æ¤¤¤Æ¤¤¤ë¾ì¹ç¤Ï¡¢dbm
     ¥Ç¡¼¥¿¥Ù¡¼¥¹¤«¤é db
     ¤Ø¤Î´ÊÃ±¤ÊÊÑ´¹¤ÎÊýË¡¤¬Ìµ¤¤¤¿¤á(¸Å¤¤¥Ç¡¼¥¿¥Ù¡¼¥¹¤ò¥À¥ó¥×¤·¤Æ¤½¤ì¤«¤é¡¢¿·¤·¤¤¼Â¹Ô¥â¥¸¥å¡¼¥ë¤Ç¥í¡¼¥É¤¹¤ëÉ¬Í×¤¬¤¢¤ê¤Þ¤¹)¡¢¤³¤Î¥ª¥×¥·¥ç¥ó¤ÏÊØÍø¤Ç¤¹¡£

`--without-afs-support'
     AFS ¤ó¥µ¥Ý¡¼¥È¤ò¤·¤Þ¤»¤ó¡£

`--with-afsws='DIR
     AFS ¥¯¥é¥¤¥¢¥ó¥È¤¬¥¤¥ó¥¹¥È¡¼¥ë¤µ¤ì¤Æ¤¤¤ë¾ì½ê¤ò»ØÄê¤·¤Þ¤¹¡£´ûÄê¤Ç¤Ï
     `/usr/afsws' ¤Ç¤¹¡£

`--enable-rxkad'
     rxkad ¥é¥¤¥Ö¥é¥ê¤ò¹½ÃÛ¤·¤Þ¤¹¡£

`--disable-dynamic-afs'
     AIX ¤Ç¤Ï¼Â¹Ô»þ¤Ë¥í¡¼¥É¤µ¤ì¤ë¶¦Í­¥é¥¤¥Ö¥é¥ê¤Ë¤è¤ê AFS
     ¤Î¥µ¥Ý¡¼¥È¤¬¹½À®¤µ¤ì¤Þ¤¹¡£¤³¤Î¥ª¥×¥·¥ç¥ó¤Ç¤Ï¤³¤ì¤òÉÔ²ÄÇ½¤Ë¤·¡¢ÀÅÅª¤Ê¥·¥¹¥Æ¥à¸Æ½Ð¤È·ë¹ç¤·¤Þ¤¹¡£¤³¤ì¤ò¹Ô¤Ê¤¦¤È¥«¡¼¥Í¥ë¤ÎÃæ¤Ë
     AFS ¤ò»ý¤¿¤Ê¤¤¥Þ¥·¥ó¾å¤Ç¤Ï¡ÊÎã¤¨¤Ð¡¢µ¯Æ°»þ¤Ë AFS
     ¥â¥¸¥å¡¼¥ë¤Î¥í¡¼¥É¤Ë¼ºÇÔ¤·¤¿¤È¤­¡Ë¡¢¹½ÃÛ¤µ¤ì¤¿¼Â¹Ô¥â¥¸¥å¡¼¥ë¤ò¥¯¥é¥Ã¥·¥å¤µ¤»¤Þ¤¹¡£

`--with-mips-api='API
     ¤³¤Î¥ª¥×¥·¥ç¥ó¤Ë¤è¤ê Irix
     ¾å¤Ç°Û¤Ê¤ë¥¿¥¤¥×¤Î¼Â¹Ô¥â¥¸¥å¡¼¥ë¤òºî¤ë¤³¤È¤¬²ÄÇ½¤Ë¤Ê¤ê¤Þ¤¹¡£»ØÄê²ÄÇ½¤ÊÃÍ¤Ï
     `32', `n32', ¤ª¤è¤Ó `64' ¤Ç¤¹¡£

`--enable-legacy-kdestroy'
     ¤³¤Î¥ª¥×¥·¥ç¥ó¤Ï¥³¥ó¥Ñ¥¤¥ë»þ¤Ë AFS ¥È¡¼¥¯¥ó¤òÇË²õ¤·¤Ê¤¤ `kdestroy'
     ¤òºî¤ê¤Þ¤¹¡£

`--disable-otp'
     OTP (see One-Time Passwords)
     ¥é¥¤¥Ö¥é¥ê¤È¥×¥í¥°¥é¥à¤ò¹½ÃÛ¤·¤Ê¤¤¤Ç¡¢¤Þ¤¿¡¢¥¢¥×¥ê¥±¡¼¥·¥ç¥ó¡¦¥×¥í¥°¥é¥à¤Ç¤Î
     OTP ¤Î¥µ¥Ý¡¼¥È¤ò¤·¤Ê¤¤¤è¤¦¤Ë¤·¤Þ¤¹¡£

`--enable-match-subdomains'
     ÄÌ¾ï¤Ï¡¢¥Û¥¹¥È `host.domain' ¤Ï¥ì¥ë¥à¤Î `DOMAIN'
     ¤Î°ìÉô¤È¹Í¤¨¤é¤ì¤Þ¤¹¡£¤³¤Î¥ª¥×¥·¥ç¥ó¤Ë¤è¤ê¡¢`host.sub.domain' ¤ä
     `host.sub1.sub2.domain' ¤Ê¤É¤Î½ñ¼°¤Î¥Û¥¹¥È¤ò¥ì¥ë¥à¤Î `DOMAIN'
     ¤Î°ìÉô¤È¹Í¤¨¤ë¤è¤¦¤Ë¤Ç¤­¤Þ¤¹¡£

`--enable-osfc2'
     OSF/1 ¾å¤Ç ³ÈÄ¥ C2 ¥»¥­¥å¥ê¥Æ¥£¤ò»È¤¨¤ë¤è¤¦¤Ë¤·¤Þ¤¹¡£See Digital SIA.

`--disable-mmap'
     mmap ¥·¥¹¥Æ¥à¸Æ½Ð¤ò»È¤ï¤Ê¤¤¤è¤¦¤Ë¤·¤Þ¤¹¡£ÄÌ¾ï¤Ï¡¢mmap
     ¤¬¤¢¤ì¤Ð¡¢configure
     ¤Ï¤½¤ì¤¬Í£°ìÆ°¤¯¤â¤Î¤È¤·¤Æ»È¤ï¤ì¤Æ¤¤¤ë¤³¤È¤ò¸«¤Ä¤±¤Þ¤¹¡£¤³¤Î¥ª¥×¥·¥ç¥ó¤Ï¡¢¤½¤ì¤¬¤É¤¦¤·¤Æ¤â¤¦¤Þ¤¯¤æ¤«¤Ê¤¤»þ¤Ë»È¤Ã¤Æ²¼¤µ¤¤¡£

`--disable-cat-manpages'
     À°·ÁºÑ¤Î¥ª¥ó¥é¥¤¥ó¡¦¥Þ¥Ë¥å¥¢¥ë¤ò¥¤¥ó¥¹¥È¡¼¥ë¤·¤Þ¤»¤ó¡£

Installing a binary distribution
================================

¼Â¹Ô¥â¥¸¥å¡¼¥ë¤ÎÇÛÉÛ¤Ï¡¢`/usr/athena'¤Ë¥¤¥ó¥¹¥È¡¼¥ë¤µ¤ì¤ë¤³¤È¤òÁÛÄê¤·¤Æ¡¢Æ°¤«¤Ê¤¤¤â¤·¤ì¤Þ¤»¤ó¤Î¤ÇÂ¾¤Î¾ì½ê¤Ë¥¤¥ó¥¹¥È¡¼¥ë¤¹¤ë¤³¤È¤Ï¾©¤á¤·¤Þ¤»¤ó¡£Â¾¤Î¾ì½ê¤Ë¥¤¥ó¥¹¥È¡¼¥ë¤»¤¶¤ë¤òÆÀ¤Ê¤¤¤È¤­¤Ï¡¢`/usr/athena'
¤«¤é¡¢¥¤¥ó¥¹¥È¡¼¥ë¤µ¤ì¤¿¥Ç¥£¥ì¥¯¥È¥ê¤Ë¥·¥ó¥Ü¥ê¥Ã¥¯¥ê¥ó¥¯¤òÄ¥¤ë¤ÈÎÉ¤¤¤Ç¤·¤ç¤¦¡£

Finishing the installation
==========================

¥¤¥ó¥¹¥È¡¼¥ë¤Î¤È¤­ root ¤ËUIDÀßÄê(setuid)¤·¤Ê¤±¤ì¤Ð¤Ê¤é¤Ê¤¤¥×¥í¥°¥é¥à¤Ï
`su' ¤À¤±¤Ç¤¹¡£

¤â¤·¡¢ `rlogin' ¤ä `rsh' ¤¬ root ¤Ë
UIDÀßÄê(setuid)¤µ¤ì¤Æ¤·¤Þ¤¦¤È¡¢¥±¥ë¥Ù¥í¥¹²½¤µ¤ì¤¿¥×¥í¥°¥é¥à¤¬¤Ê¤ó¤é¤«¤ÎÍýÍ³¤Ç¼ºÇÔ¤·¤¿¤È¤­¤Î¤è¤¦¤Ë¡¢¥±¥ë¥Ù¥í¥¹¤ò»È¤ï¤Ê¤¤¥×¥í¥È¥³¥ë¤ËÌá¤Ã¤Æ¤·¤Þ¤¤¤Þ¤¹¡£
¸Å¤¤¥×¥í¥È¥³¥ë¤Ç¤Ï¥»¥­¥å¥ê¥Æ¥£¤Î¤¿¤á¤ËÍ½ÌóºÑ¤Î¥Ý¡¼¥È¤ò»È¤Ã¤Æ¤¤¤ë¤¿¤á¡¢¥×¥í¥°¥é¥à¤Ï
root ¤Ë
UIDÀßÄê¤µ¤ì¤Æ¤¤¤Ê¤¯¤Æ¤Ï¤Ê¤ê¤Þ¤»¤ó¡£¤â¤·¡¢¤³¤¦¤¹¤ë¤³¤È¤¬É¬Í×Ìµ¤±¤ì¤Ð¡¢UIDÀßÄê¥Ó¥Ã¥È¤ò³°¤¹¤³¤È¤ò¸¡Æ¤¤·¤Æ²¼¤µ¤¤¡£

`login' ¤Ï¡¢¤¤¤Ä¤â root
¤¬Áö¤é¤»¤ë¤Î¤Ç¡¢UIDÀßÄê¤µ¤ì¤ëÉ¬Í×¤Ï¤¢¤ê¤Þ¤»¤ó(¥æ¡¼¥¶¤Ï `login' ¤Ç¤Ï¤Ê¤¯
`su' ¤ò»È¤¦¤Ù¤­¤Ç¤¹)¡£root ¤Ë
UIDÀßÄê¤µ¤ì¤Ê¤¤¤Þ¤Þ¡¢¥æ¡¼¥¶¤¬Áö¤é¤»¤¿¤È¤­¤Ï¡¢²¿¤é¤«¤Î¼ê¤¬¤«¤ê¤È¤Ê¤ë¾ðÊó¤¬É½¼¨¤µ¤ì¤Þ¤¹¡£

¥æ¡¼¥¶¤¬Áö¤é¤»¤ë¤³¤È¤ò°Õ¿Þ¤·¤¿¥×¥í¥°¥é¥à¤Ï `/usr/athena/bin'
¤Ë¤¢¤ê¤Þ¤¹¡£¥æ¡¼¥¶¤Ë `/usr/athena/bin'
¤ò¥Ñ¥¹¤Ë´Þ¤á¤ë¤è¤¦ÃÎ¤é¤»¤Æ²¼¤µ¤¤¡£¤¢¤ë¤¤¤Ï¡¢¼Â¹Ô¥â¥¸¥å¡¼¥ë¤òÅ¬Åö¤Ê¾ì½ê¤Ë¥³¥Ô¡¼¡¢¤Þ¤¿¤Ï¡¢¥·¥ó¥Ü¥ê¥Ã¥¯¡¦¥ê¥ó¥¯¤·¤Æ¤¯¤À¤µ¤¤¡£¤ª¤½¤é¤¯¡¢»È¤¤¤¿¤¤¥×¥í¥°¥é¥à¤Ï¡§

`kauth'/`kinit', `klist', `kdestroy', `kpasswd', `ftp', `telnet',
`rcp', `rsh', `rlogin', `su', `rxtelnet', `tenletxr', `rxterm', ¤ª¤è¤Ó
`xnlock' ¤Ç¤·¤ç¤¦¡£ ¤â¤· AFS ¤ò¤ª»È¤¤¤Ç¤¢¤ì¤Ð¡¢`afslog' ¤È `pagsh'
¤â¤Þ¤¿ÊØÍø¤Ç¤¹¡£´ÉÍý¼Ô¤Ï¡¢`/usr/athena/sbin' ¤Ë¤¢¤ë `kadmin' ¤È
`ksrvutil' ¤ò»È¤¦¤ÈÊØÍø¤Ç¤¹¡£

`telnetd' ¤È `rlogind' ¤Ï `login' ¤¬ `/usr/athena/bin'
(¤¢¤ë¤¤¤Ï`--prefix' ¤Ë»ØÄê¤·¤¿¥Ñ¥¹)
¤Ë¤¢¤ë¤³¤È¤òÁ°Äó¤Ë¤·¤Æ¤¤¤¹¡£¤â¤·¡¢¤Ê¤ó¤é¤«¤ÎÍýÍ³¤Ç `login'
¤ò°ÜÆ°¤·¤¿¤±¤ì¤Ð¡¢ telnetd ¤È rlogind ¤ò `inetd.conf'
¤ÎÃæ¤ËÀßÄê¤¹¤ë¤È¤­¤Ë¡¢ `-L'
ÀÚÂØ¤Ç¿·¤¿¤Ê¾ì½ê¤ò»ØÄê¤·¤Ê¤±¤ì¤Ð¤Ê¤é¤Ê¤¤¤Ç¤·¤ç¤¦¡£

¥·¥¹¥Æ¥à¤Î´ûÄê¤Î `login' ¤ò¥±¥ë¥Ù¥í¥¹²½¤µ¤ì¤¿ `login'
¤ÈÃÖ¤­´¹¤¨¤ë¤³¤È¤â²ÄÇ½¤Ê¤Ï¤º¤Ç¤¹¡£¤·¤«¤·¤Ê¤¬¤é¡¢¤¢¤ë¥·¥¹¥Æ¥à¤Ç¤Ï login
¤¬¡¢²æ¡¹¤Î login
¤Ç¤Ï¤·¤Ê¤¤¤è¤¦¤Ê¡¢¤¢¤ëÈó¾ï¤Ë½ÅÍ×¤Ê(²æ¡¹¤¬¤¤¤¯¤é¤ä¤í¤¦¤È¤·¤Æ¤â¤Ç¤­¤Ê¤¤¤è¤¦¤Ê)¥È¥ê¥Ã¥¯¤ò±é¤¸¤ë¤³¤È¤ò²¾Äê¤·¤Æ¤Þ¤¹¡£¤Ç¤¹¤«¤é¡¢¥Þ¥·¥ó¤ÎÃÖ´¹¤¨¤òÁ´¤Æ¹Ô¤Ê¤¦Á°¤Ë²¿¤¬¤ª¤³¤ë¤«¤ò»î¤·¤Æ¤ß¤Þ¤·¤ç¤¦¡£¤Þ¤¿¡¢Äó¶¡¤µ¤ì¤Æ¤¤¤ëÇ§¾Ú¥â¥¸¥å¡¼¥ë(see
Authentication modules)¤Î°ì¤Ä¤ò»È¤¨¤ë¤³¤È¤â»î¤·¤Æ¤ß¤ë¤Ù¤­¤Ç¤¹¡£

²æ¡¹¤Î»È¤Ã¤¿ `login' ¥×¥í¥°¥é¥à¤Ï¡¢NetBSD
¤ÎÉ¸½à¥í¥°¥¤¥ó¥×¥í¥°¥é¥à¤Î½é´ü¤Î¤³¤í¤Î¤â¤«¤éÇÉÀ¸¤·¤¿¤â¤Î¤Ç¤¹¡£¤½¤ì¤òÂô»³¤Î´ñ²ø¤Ê¥·¥¹¥Æ¥à(Solaris,
SunOS, IRIX, AIX, ¤½¤ÎÂ¾)¤Ç»È¤¦¤¿¤á¤Ë¡¢Â¾¤ÎÂ¿¤¯¤Î¥·¥¹¥Æ¥à¤Î login
¤ÎÆÃÄ§¤ò¤â¤Ã¤Æ
"²þÁ±"¤µ¤ì¤Þ¤·¤¿¡£¤½¤Î¤¦¤Á¤Î´ö¤Ä¤«¤ÎÆÃÄ§¤ÏËÜÅö¤ËÊØÍø¤Ç¡¢¤½¤ÎÂ¾¤Î¥·¥¹¥Æ¥à¤Ç¤â»È¤¤¤¿¤¯¤Ê¤ë¤è¤¦¤Ê¤â¤Î¤Ç¤¹¡£

`/etc/fbtab'
`/etc/logindevperm'
     ÆÃÄê¤ÎÃ¼Ëö¤«¤é¥æ¡¼¥¶¤¬¥í¥°¥¤¥ó¤¹¤ë¤È¤­¤Ë¤¢¤ë¥Ç¥Ð¥¤¥¹¤Î¥ª¡¼¥ÊÊÑ¹¹(chown)¤òµö¤·¤Þ¤¹¡£ÄÌ¾ï¤ÏÃ¯¤«¤¬
     /dev/console ¤Ç¥í¥°¥¤¥ó¤·¤Æ¤¤¤ë»þ¤Ë¡¢ `/dev/mouse', `/dev/kbd',
     ¤½¤ÎÂ¾¤Î¥Ç¥Ð¥¤¥¹¤Î¥ª¡¼¥Ê¤òÊÑ¹¹¤¹¤ë¤Î¤Ë»È¤¤¤Þ¤¹¡£

     `/etc/fbtab' ¤Ï SunOS
     ¤Ç¤Î¥Õ¥¡¥¤¥ëÌ¾¤ÇºÇ½é¤Ë»î¤µ¤ì¤Þ¤¹¡£¤â¤·¡¢¤½¤ÎÌ¾Á°¤Î¥Õ¥¡¥¤¥ë¤¬¤Ê¤±¤ì¤Ð¡¢Solaris
     ¤Ç¤Î¥Õ¥¡¥¤¥ëÌ¾ `/etc/logindevperm' ¤¬»î¤µ¤ì¤Þ¤¹¡£

`/etc/environment'
     ¤³¤Î¥Õ¥¡¥¤¥ë¤Ï¡¢¥æ¡¼¥¶¤¬¥í¥°¥¤¥ó¤·¤¿¤È¤­¤Ë¤É¤Î´Ä¶­ÊÑ¿ô¤¬ÀßÄê¤µ¤ì¤ë¤Ù¤­¤«¤ò»ØÄê¤·¤Þ¤¹(AIX
     Î®)¡£

`/etc/default/login'
     ¤Û¤È¤ó¤É `/etc/environment' ¤ÈÆ±¤¸¤Ç¤¹¤¬¡¢System V Î®¤Ç¤¹¡£

`/etc/login.access'
     Ã¯¤¬¤É¤³¤«¤é¤É¤Î tty
     ¤Ë¥í¥°¥¤¥ó¤Ç¤­¤ë¤«¤òÀ©¸æ¤¹¤ë¤Î¤Ë»È¤ï¤ì¤Þ¤¹(Wietse Venema ¤è¤ê)¡£

¤½¤ì¤¾¤ì¤Î¥æ¡¼¥¶¤ÏÇ§Äê¥Õ¥¡¥¤¥ë`~USER/.klogin'¤ò»ý¤Ä¤³¤È¤¬¤Ç¤­¤Þ¤¹¡£
¤Ï¡¢¤É¤Î¥×¥ê¥ó¥·¥Ñ¥ë¤¬¤½¤Î¥æ¡¼¥¶¤È¤·¤Æ¥í¥°¥¤¥ó¤Ç¤­¤ë¤«¤ò·èÄê¤·¤Þ¤¹¡£IP¤ÈÆÃ¸¢¥Ý¡¼¥È¤ò´ð¤Ë¤·¤¿Ç§¾Ú¤Ç¤Ê¤¤¤³¤È¤ò½ü¤±¤Ð¡¢`~user/.rhosts'
¤È»÷¤Æ¤¤¤Þ¤¹¡£¤â¤·¡¢¤³¤Î¥Õ¥¡¥¤¥ë¤¬Â¸ºß¤·¤Ê¤±¤ì¤Ð¡¢`user@LOCALREALM'
¤Î¥æ¡¼¥¶¼«¿È¤Î¥í¥°¥¤¥ó¤¬µö¤µ¤ì¤Þ¤¹¡£¤½¤ì¤ËÄÉ¿ï¤¹¤ë¥í¡¼¥«¥ë¡¦¥ì¥ë¥à(see
Install the configuration files)
¤â¡¢¤³¤³¤ÇÍ¿¤¨¤é¤ì¤Þ¤¹¡£¤â¤·¡¢¥Õ¥¡¥¤¥ë¤¬Â¸ºß¤¹¤ì¤Ð¡¢¥í¡¼¥«¥ë¤Î¥æ¡¼¥¶USER
¤È¤·¤Æ¥í¥°¥¤¥ó¤¹¤ë¤³¤È¤¬µö¤µ¤ì¤ë¡¢Â¾¤Î¥×¥ê¥ó¥·¥Ñ¥ë¤¬´Þ¤Þ¤ì¤ë¤Ù¤­¤Ç¤¹¡£

¤Û¤È¤ó¤É¤Î¥Ç¡¼¥â¥ó( `rlogind',`rshd', `ftpd', `telnetd', `popper',
`kauthd', ¤Ê¤é¤Ó¤Ë `kxd' ) ¤Ï¡¢¤³¤Î¥Õ¥¡¥¤¥ë¤È¶¨µÄ¤·¤Æ

¤½¤Î¥×¥ê¥ó¥·¥Ñ¥ë¤¬¡¢Í×µá¤¹¤ë¥µ¡¼¥Ó¥¹¤ò¼õ¤±¤ë¤³¤È¤òµö¤µ¤ì¤ë¤«¤ò·èÄê¤·¤Þ¤¹¡£
¤Þ¤¿¡¢ `su' ¤Ç¤â¡¢Ã¯¤¬ root
¤Ë¤Ê¤ë¤³¤È¤òµö¤µ¤ì¤Æ¤¤¤ë¤«¤Ë¤Ä¤¤¤Æ¤Î¥¢¥¯¥»¥¹À©¸æ¥ê¥¹¥È (ACL)
¤ò°Ý»ý¤¹¤ëÎÉ¤¤ÊýË¡¤È¤·¤Æ¤â»È¤ï¤ì¤Æ¤¤¤Þ¤¹¡£

`~root/.klogin' ¤Ë¼¡¤Î¤â¤Î¡§

     nisse.root@FOO.SE
     lisa.root@FOO.SE

¤¬´Þ¤Þ¤ì¤ë¤³¤È¤ò²¾Äê¤·¤Þ¤¹¡£nisse ¤È lisa ¤È¤¤¤¦¥æ¡¼¥¶¤Ï¡¢¤É¤Á¤é¤â root
¥¤¥ó¥¹¥¿¥ó¥¹¤Î¥Ñ¥¹¥ï¡¼¥É¤òÆþÎÏ¤¹¤ë¤³¤È¤Ë¤è¤ê root ¤Ë su
¤¹¤ë¤³¤È¤¬¤Ç¤­¤Þ¤¹¡£ ¤â¤·¡¢`~root/.klogin' ¤Ë´Þ¤Þ¤ì¤Ê¤¤¥æ¡¼¥¶¤Ï `su'
¤Ë¼ºÇÔ¤·¡¢Ã¯¤¬ su ¤Ç¤­¤ë¤«¤Ë¤Ä¤¤¤Æ¤ÎÉáÄÌ¤ÎÊý¿Ë¤ËÌá¤ê¤Þ¤¹¡£ nisse ¤È
lisa ¤Ï¡¢¼«Ê¬¤¿¤Á¤Î root
¥¤¥ó¥¹¥¿¥ó¥¹¤Î¥Á¥±¥Ã¥È¤ò»ý¤Æ¤Ð¡¢¤¿¤È¤¨¤Ð¡¢`telnet' ¤Ç root
¸¢¸Â¤Ç¥í¥°¥¤¥ó¤¹¤ë¤³¤È¤¬¤Ç¤­¤ë¤³¤È¤â¤³¤³¤Ëµ­¤·¤Æ¤ª¤­¤Þ¤¹¡£

Authentication modules
======================

°Û¤Ê¤ëÇ§¾Úµ¡¹½¤ò»ý¤Ä¤³¤È¤ÎÌäÂê¤Ï´ö¤Ä¤«¤Î¥Ù¥ó¥À¡¼¤Ë¤è¤êÇ§¼±¤µ¤ì¤Æ¤Þ¤¹¡¢¤½¤·¤Æ¡¢´ö¤Ä¤«¤Î²ò·èºö¤¬²Ã¤¨¤é¤ì¤Æ¤­¤Þ¤·¤¿¡£¤Û¤È¤ó¤É¤Î¾ì¹ç¤Ï¡¢¤³¤ì¤é¤Î²ò·èºö¤Ç¤Ï¤¢¤ë¼ï¤Î¶¦Í­¥â¥¸¥å¡¼¥ë¤òÆ°ºî»þ¤Ë¥í¡¼¥É¤·¤ÆÆâÊñ¤·¤Þ¤¹¡£¤³¤ì¤é¤Î¥·¥¹¥Æ¥à¤Î´ö¤Ä¤«¤Î¥â¥¸¥å¡¼¥ë¤Ï
`lib/auth' ¤Ç¸«¤Ä¤±¤é¤ì¤Þ¤¹¡£¸½»þÅÀ¤Ç¤Ï¡¢Digital ¤Î SIA¡¢ Solaris ¤ä
Linux ¤Î PAM¡¢ ¤½¤ì¤È¡¢ IRIX ¤Î (`lib/auth/afskauthlib' ¤Ë¤¢¤ë) `login'
¤È `xdm' ¤Ç¤¹¡£

Digital SIA
-----------

SIA
¥â¥¸¥å¡¼¥ë¤ò¥¤¥ó¥¹¥È¡¼¥ë¤¹¤ëÊýË¡¤Ï¤É¤Î¥Ð¡¼¥¸¥ç¥óOS¤Î¾å¤ÇÁö¤é¤»¤ë¤«¤Ë°ÍÂ¸¤·¤Þ¤¹¡£Tru64
5.0 ¤Ë¤Ï `siacfg'
¤È¤¤¤¦¿·¤·¤¤¥³¥Þ¥ó¥É¤¬¤¢¤ê¡¢¤³¤Î²áÄø¤ò¤È¤Æ¤âÃ±½ã¤Ë¤·¤Þ¤¹¡£¤â¤·¡¢¤³¤Î¥×¥í¥°¥é¥à¤¬¤¢¤ì¤Ð¡¢¤¿¤ÀÃ±¤Ë¤Ä¤®¤Î¤è¤¦¤ËÁö¤é¤»¤ë¤À¤±¤Ç¤¹:
     siacfg -a KRB4 /usr/athena/lib/libsia_krb4.so

¸Å¤¤¥Ð¡¼¥¸¥ç¥ó¡¢¤¢¤ë¤¤¤Ï¤¹¤Ù¤Æ¤ò¼«Ê¬¤Î¼ê¤Ç¹Ô¤¤¤Î¤Ç¤¢¤ì¤Ð¡¢°Ê²¼¤Î¤è¤¦¤Ë¹Ô¤¤¤Þ¤¹¡Ê¤¿¤À¤·¡¢Tru64
5.0 ¤Ç¤Ï¤¿¤·¤«¤á¤Æ¤¤¤Þ¤»¤ó¡Ë¡£

   * `libsia_krb4.so' ¤¬ `/usr/athena/lib'
     ¤Î²¼¤Ë¤¢¤Ã¤Æ¡¢ÍøÍÑ¤Ç¤­¤ë¤³¤È¤ò³ÎÇ§¤·¤Æ²¼¤µ¤¤¡£¤â¤·¡¢`/usr/athena'
     ¤¬¥í¡¼¥«¥ë¡¦¥Ç¥£¥¹¥¯¾å¤Ë¤Ê¤±¤ì¤Ð¡¢¤½¤ì¤é¤Ï¡¢`/usr/shlib'
     ¤Î²¼¤Ç¤â¡¢¤¢¤ë¤¤¤ÏÊÌ¤Î¤¢¤ë¾ì½ê¤Ç¤â¹½¤¤¤Þ¤»¤ó¡£¤â¤·¤½¤¦¤¹¤ë¤Î¤Ç¤¢¤ì¤Ð¡¢`krb4_matrix.conf'
     ¤òÊÔ½¸¤·¤Æ¡¢¿·¤·¤¤¾ì½ê¤òÈ¿±Ç¤µ¤»¤ëÉ¬Í×¤¬¤¢¤ë¤Ç¤·¤ç¤¦(¤â¤·
     `/usr/athena'
     °Ê³°¤Ë¥¤¥ó¥¹¥È¡¼¥ë¤·¤¿»þ¤Ï¡¢¤³¤Îºî¶È¤¬É¬Í×¤È¤Ê¤ê¤Þ¤¹¡£)¡£
     ¤â¤·¡¢¶¦Í­¥é¥¤¥Ö¥é¥ê¤Ç¹½ÃÛ¤¹¤ë¤È¡¢¶¦Í­¥Õ¥¡¥¤¥ë`libkrb.so',
     `libdes.so',+`libkadm.so', ¤ª¤è¤Ó `libkafs.so'
     ¤ò¥í¡¼¥À¤¬¤½¤ì¤é¤ò¸«¤Ä¤±¤é¤ì¤ë(`/usr/shlib'
     ¤Î¤è¤¦¤Ê)¾ì½ê¤Ë¥³¥Ô¡¼¤·¤Æ¤ª¤«¤Ê¤¯¤Æ¤Ï¤Ê¤ê¤Þ¤»¤ó¡£

   * `krb4_matrix.conf' ¤ò `/etc/sia'
     ¤Ë¥³¥Ô¡¼¤·¤Þ¤¹(ÊÔ½¸¤µ¤ì¤Æ¤â¤«¤Þ¤¤¤Þ¤»¤ó)¡£

   * `security.patch' ¤ò `/sbin/init.d/security' ¤ËÅ¬ÍÑ¤·¤Þ¤¹¡£

   * `rcmgr set SECURITY KRB4' ¤È `rcmgr set KRB4_MATRIX_CONF
     krb4_matrix.conf' ¤ò¼Â¹Ô¤·¤Æ KRB4
     ¥»¥­¥å¥ê¥Æ¥£¤ò¹Ô¤Ê¤¦¤è¤¦¤Ë¤·¤Þ¤¹¡£

   * Compaq(Digital)
     ¤Î¿Í¤Ï¥Þ¥·¥ó¤ò¥ê¥Ö¡¼¥È¤¹¤ë¤Ù¤­¤À¤È¸À¤¦¤Ç¤·¤ç¤¦¤¬¡¢ËÜÅö¤ÏÉ¬Í×¤Ê¤¤¤Ï¤º¤Ç¤¹¡£ÄÌ¾ï¤Ï¡¢`/sbin/init.d/security
     start' ¤òÁö¤é¤»¤ë¤À¤±¤Ç¤¹¡£(¤½¤·¤Æ SIA ¤ò»È¤¦ `xdm'
     ¤Î¤è¤¦¤ÊÇ¤°Õ¤Î¥¢¥×¥ê¥±¡¼¥·¥ç¥ó¤ò¥ê¥¹¥¿¡¼¥È¤µ¤»¤Þ¤¹¡£)

¥í¡¼¥«¥ë¡¦¥Ñ¥¹¥ï¡¼¥É¤Î(`root'¤Î¤è¤¦¤Ê)¥æ¡¼¥¶¤Ï°ÂÁ´¤Ë¥í¥°¥¤¥ó¤Ç¤­¤ë¤Ï¤º¤Ç¤¹¡£
Compaq(Digital) ¤Î xdm ¤ò»È¤¦»þ¡¢(xdm ¤¬´Ä¶­¤ò²õ¤¹(zaps)¤Î¤Ç)ÅÏ¤¹¤Ù¤­
`KRBTKFILE'
´Ä¶­ÊÑ¿ô¤¬ÅÏ¤µ¤ì¤Þ¤»¤ó¡£¤½¤ÎÂå¤ï¤ê¤Ë¡¢`/usr/lib/X11/xdm/Xsession'
¤ÎÃæ¤Ë `KRBTKFILE'
¤òÀµ¤·¤¤ÃÍ¤ËÀßÄê¤·Ä¾¤µ¤Ê¤¯¤Æ¤Ï¤Ê¤ê¤Þ¤»¤ó¡£¼¡¤Î¤è¤¦¤Ê¹Ô¤ò²Ã¤¨¤Þ¤¹¡£

     KRBTKFILE=/tmp/tkt`id -u`_`ps -o ppid= -p $$`; export KRBTKFILE

¤â¤·¡¢CDE ¤ò»È¤Ã¤Æ¤¤¤ë¤Ê¤é¡¢`dtlogin'
¤¬¤É¤ÎÄÉ²Ã´Ä¶­¤ò¥¨¥­¥¹¥Ý¡¼¥È¤¹¤ë¤Ù¤­¤«¤ò»ØÄê¤¹¤ë¤³¤È¤òµö¤·¤Þ¤¹¡£`KRBTKFILE'
¤ò¤³¤Î¥ê¥¹¥È¤Ë²Ã¤¨¤ë¤Ë¤Ï¡¢`/usr/dt/config/Xconfig'
¤òÊÔ½¸¤·¤Æ¡¢`exportList'
¤ÎÄêµÁ¤òÁÜ¤·¤Æ¤¯¤À¤µ¤¤¡£¤ª¤ª¤è¤½¼¡¤Î¤è¤¦¤Ë¤Ê¤ë¤Ç¤·¤ç¤¦¡£
     Dtlogin.exportList:     KRBTKFILE

Notes to users with Enhanced security
.....................................

Digital ¤Î `ENHANCED' (C2) ¥»¥­¥å¥ê¥Æ¥£¡¢
¤ª¤è¤Ó¥±¥ë¥Ù¥í¥¹¤ÏÆó¤Ä¤Î¤³¤È¤Ê¤ëÌäÂê¤ò²ò·è¤·¤Þ¤¹¡£¥í¡¼¥«¥ë¥»¥­¥å¥ê¥Æ¥£¤ò°·¤¦
C2
¤Ï¡¢Ã¯¤¬²¿¤ò¤Ç¤­¤ë¤«¤ä´Æºº¡¢¤ª¤è¤Ó¡¢Æ±ÍÍ¤Ê¤³¤È¤ò¤¹¤ë¾å¤Ç¤è¤êÎÉ¤¤À©¸æ¤ò²Ã¤¨¤Þ¤¹¡£¥±¥ë¥Ù¥í¥¹¤Ï¥Í¥Ã¥È¥ï¡¼¥¯¡¦¥»¥­¥å¥ê¥Æ¥£¤ò¼è¤ê°·¤¤¤Þ¤¹¡£

C2
¥»¥­¥å¥ê¥Æ¥£¤¬¥±¥ë¥Ù¥í¥¹¤È¶¡¤ËÆ°¤¯¤è¤¦¤Ë¤¹¤ë¤¿¤á¤Ë¤Ï¡¢°Ê²¼¤Î¤³¤È¤ò¤¹¤ëÉ¬Í×¤¬¤¢¤ê¤Þ¤¹¡£

   * Á´¤Æ¤Î `krb4_matrix.conf' ¤Î»Å¾å¤¬¤ê¤ò¾åµ­¤ÎÊý¿Ë¤Ç
     `krb4+c2_matrix.conf' ¤ËÃÖ¤­´¹¤¨¤Þ¤¹¡£

   * "Î¢ÂÇ¤¦¤Á"(vouching) ¤ò
     `´ûÄê'¥Ç¡¼¥¿¥Ù¡¼¥¹¤Ç²ÄÇ½¤Ë¤¹¤ëÉ¬Í×¤¬¤¢¤ê¤Þ¤¹¡£¤³¤ì¤Ï¡¢OSF
     C2¥â¥¸¥å¡¼¥ë¤Ë SIA ¥â¥¸¥å¡¼¥ë¤ò¿®ÍÑ¤µ¤»¤ë¤Î¤Ç¡¢C2
     ¥Ñ¥¹¥ï¡¼¥É¤òÍ¿¤¨¤ë¤³¤ÈÌµ¤·¤Ç¥í¥°¥¤¥ó¤¬¤Ç¤­¤Þ¤¹¡£¤³¤ì¤ò¤¹¤ë¤Ë¤Ï¡¢`edauth'
     ¤ò»È¤Ã¤Æ `/usr/tcb/bin/edauth -dd default'
     ¤Ç´ûÄê¤Îµ­ºÜÊÔ½¤¤·¡¢¤â¤·Ì¤¤ÀÌµ¤±¤ì¤Ð
     `d_accept_alternate_vouching'µ¡Ç½¤ò²Ã¤¨¤Þ¤¹¡£

   * ¥í¡¼¥«¥ë C2 ¥Ñ¥¹¥ï¡¼¥É¤ò»ý¤Ã¤Æ _Ìµ¤¤_
     ¤½¤ì¤¾¤ì¤Î¥æ¡¼¥¶¤Ë¤Ï¡¢¥Ñ¥¹¥ï¡¼¥É¤Î´ü¸Â¥Õ¥£¡¼¥ë¥É¤òÎí¤ËÀßÄê¤¹¤ë¤Ù¤­¤Ç¤¹¡£¤³¤ÎÀßÄê¤Ï¡¢¤½¤ì¤¾¤ì¤Î¥æ¡¼¥¶Ëè¤Ë¹Ô¤Ê¤¦¤«¡¢¤¢¤ë¤¤¤Ï
     `´ûÄê¤Î' É½¤ÎÃæ¤Ç¹Ô¤Ê¤¨¤Þ¤¹¡£¤³¤ì¤ò¹Ô¤Ê¤¦¤Ë¤Ï `edauth'
     ¤ò»È¤Ã¤Æ`u_exp' µ¡Ç½¤ò `u_exp#0' ¤ËÀßÄê¡Ê¤¢¤ë¤¤¤ÏÊÑ¹¹¡Ë¤·¤Þ¤¹¡£

   *  ½Ð²Ù¤µ¤ì¤¿ `login', `rcp', ¤ª¤è¤Ó `rshd' ¤¬¡¢ÆÃÊÌ¤Ê C2
     ¤Î¥Þ¥¸¥Ã¥¯(Ìµ¸ú¤Ë¤µ¤ì¤¿¥¢¥«¥¦¥ó¥È¤Î¿§¡¹¤Ê·Á¼°¤Î³ÎÇ§¤Î¤è¤¦¤Ê¤â¤Î)¤òÁ´¤¯¤·¤Ê¤¤¤³¤È¤Ëµ¤¤Å¤¯É¬Í×¤â¤¢¤ë¤Ç¤·¤ç¤¦¡£¤½¤¦¤·¤Æ¡¢¤â¤·¡¢¤³¤ì¤é¤Îµ¡Ç½¤òÍê¤ê¤¿¤¤¤Ê¤é¤Ð¡¢¤³¤ì¤é¤Î¥×¥í¥°¥é¥à¤ò»È¤¦¤Ù¤­¤Ç¤Ï¤¢¤ê¤Þ¤»¤ó¡£¤â¤·¡¢`--enable-osfc2'
     ¤Ç¹½À®(configure)¤ò¤¹¤ì¤Ð¡¢¤³¤ì¤é¤Î¥×¥í¥°¥é¥à¤ò»È¤¨¤Þ¤¹¤¬¡¢¤·¤«¤·¡¢¥í¥°¥¤¥ó
     UID ¤òÀßÄê¤·¤Þ¤¹¡£¤½¤ì¤Ç¤â: ¥ê¥¹¥¯¤ò³Ð¸ç¤Î¾å¤ª»È¤¤²¼¤µ¤¤¡£

¸½¾õ¤Ç¤Ï¡¢ `su'
¤¬Î¢ÂÇ¤¦¤Á¥Õ¥é¥°¤ò¼õ¤±ÉÕ¤±¤Þ¤»¤ó¤Î¤Ç¡¢»×¤Ã¤¿¤è¤¦¤Ë¤ÏÆ¯¤­¤Þ¤»¤ó¡£

¤Þ¤¿¡¢¥±¥í¥Ù¥í¥¹²½¤µ¤ì¤¿ ftp ¤Ï C2 ¥Ñ¥¹¥ï¡¼¥É¤Ç¤ÏÆ°¤­¤Þ¤»¤ó¡£¤³¤ì¤Ï
Digital ¤Î ftpd ¤È²æ¡¹¤Î¤â¤Î¤òÊÌ¤Î¥Ý¡¼¥È¤Ç»È¤¦¤³¤È¤Ë¤è¤ê²ò·è¤Ç¤­¤Þ¤¹¡£

¤â¤·¤³¤ì¤é¤ÎÊÑ¹¹¤ò¤¹¤ë¤È¡¢¤«¤Ê¤ê³Î¼Â¤Ë C2
¥·¥¹¥Æ¥à¤ÎÍ×µá¤ò´°Á´¤Ë¤ÏËþ¤¿¤µ _Ìµ¤¯_ ¤Ê¤ë¤³¤È¤ò *Ëº¤ì¤Ê¤¤¤Ç²¼¤µ¤¤*¡£
¤â¤·¡¢C2
¤¬Íß¤·¤¯¤Æ¤â¡¢Ã¯¤«¤¬ÌµÍýÌðÍý»È¤ï¤»¤è¤¦¤È¤·¤Ê¤¤¸Â¤ê¡¢¤·¤Ð¤é¤¯¤Ï¤¢¤­¤é¤á¤Æ²¼¤µ¤¤¡£¤â¤·¡¢¤½¤ì°Ê¾å¤Ç¤­¤Ê¤¤¤¯¤é¤¤¥·¥¹¥Æ¥à¤ò¤â¤Ã¤È°ÂÁ´¤Ë¤·¤Æ¥»¥­¥å¥ê¥Æ¥£¤ò¹â¤á¤¿¤±¤ì¤Ð¡¢¤ª¤½¤é¤¯¤â¤Ã¤È°ÂÁ´¤Ê¥·¥¹¥Æ¥à¤ò¼ê¤ËÆþ¤ì¤ë¤Ç¤·¤ç¤¦¡£´û¤Ë¤Ï¤Ã¤­¤ê¤ÈÊ¬¤«¤ë¤è¤¦¤Ê¥Ñ¥¹¥ï¡¼¥É¤òÁ÷¤Ã¤¿¤ê¤Ï¤·¤Æ¤Ê¤¤¤Ç¤·¤ç¤¦¡£

IRIX
----

IRIX ¤Î¥µ¥Ý¡¼¥È¤Ï Transarc ¤Î `afskauthlib.so'
¤È¸ß´¹¤Î¥â¥¸¥å¡¼¥ë¤Ç¤¹¡£¤³¤Î¥é¥¤¥Ö¥é¥ê¤ò»È¤¦Á´¤Æ¤Î¥×¥í¥°¥é¥à¤ÏÆ°¤¯¤Ï¤º¤Ç¡¢`login'
¤È `xdm'¤ò´Þ¤à¤Ï¤º¤Ç¤¹¡£

¥¤¥ó¥¿¡¼¥Õ¥§¡¼¥¹¤Ë¤Ä¤¤¤Æ¤Ï¤¢¤Þ¤êÊ¸½ñ²½¤µ¤ì¤Æ¤¤¤Þ¤»¤ó¤¬¡¢`libkafs.so',
`libkrb.so' ¤ª¤è¤Ó `libdes.so' ¤ò `/usr/lib'
¤Ë¥³¥Ô¡¼¤¹¤ë¤«¡¢`afskauthlib.so' ¤òÀÅÅª¤Ë·ë¹ç¤·¤Æ¹½ÃÛ¤¹¤ë¤è¤¦¤Ç¤¹¡£

¥Õ¥¡¥¤¥ë `afskauthlib.so' ¼«¿È¤Ï `/usr/vice/etc' ¤« `/usr/afsws/lib'
¤«¤¢¤ë¤¤¤Ï¡¢(¤½¤ì¤¬¤¢¤ë)¸½¹Ô¤Î¥Ç¥£¥ì¥¯¥È¥ê¤ËÃÖ¤«¤ì¤Æ¤¤¤Æ¤âÎÉ¤¤¤è¤¦¤Ç¤¹¡£

IRIX 6.4 °Ê¹ß¤Î¤¹¤Ù¤Æ¤Î¥×¥í¥°¥é¥à¤Ï (`xdm' ¤È `login' ¤È¤ò´Þ¤ß¤Þ¤¹)N32
¥ª¥Ö¥¸¥§¥¯¥È¡¦¥Õ¥©¡¼¥Þ¥Ã¥È¤Ç¤¹¤¬¡¢¤½¤ì¤è¤ê¸Å¤¤¥Ð¡¼¥¸¥ç¥ó¤Ç¤Ï O32
¥ª¥Ö¥¸¥§¥¯¥È¤Ç¤¹¡£¤½¤ì¤é¤¬Æ°¤¯¤¿¤á¤Ë¤Ï¡¢`afskauthlib.so'
¥é¥¤¥Ö¥é¥ê¤¬¤½¤ì¤ò¥í¡¼¥É¤·¤è¤¦¤È¤·¤Æ¤¤¤ë¥×¥í¥°¥é¥à¤ÈÆ±¤¸¥ª¥Ö¥¸¥§¥¯¥È¡¦¥Õ¥©¡¼¥Þ¥Ã¥È¤Ç¤Ê¤¯¤Æ¤Ï¤Ê¤ê¤Þ¤»¤ó¡£¤³¤Î¤¿¤á¤Ë¤Ï¡¢´ûÄê¤Î
N32 ¤Ë²Ã¤¨¤Æ O32 ¤Î¤¿¤á¤Î¹½À®¤È¹½ÃÛ¤ò¤¹¤ëÉ¬Í×¤¬¤¢¤ë¤È¤¤¤¦¤³¤È¤Ç¤¹¡£

¤³¤ì°Ê³°¤Ë¤Ï¡¢ÀßÄê¥Õ¥¡¥¤¥ë¤Ï¤¢¤ê¤Þ¤»¤ó¤Î¤Ç "¤Þ¤µ¤ËÆ°¤¯" ¤Ï¤º¤Ç¤¹¡£

PAM
---

¸½»þÅÀ¤Ç PAM ¥â¥¸¥å¡¼¥ë¤Ï Linux ¤È SunOS5(¤¤¤ï¤æ¤ëSolaris)
¤Ç¤·¤«¥Æ¥¹¥È¤·¤Æ¤¤¤Þ¤»¤ó¡£¤ª¤½¤é¤¯¡¢¤Û¤«¤Î¥·¥¹¥Æ¥à¤Ç¤âÆ¯¤¯¤Ç¤·¤ç¤¦¤¬»î¤·¤¿¤³¤È¤Ï¤¢¤ê¤Þ¤»¤ó¡£

¤³¤Î¥â¥¸¥å¡¼¥ë¤ò¹½ÃÛ¤¹¤ë¤Ë¤Ï¡¢°ú¿ô `--enable-shared' ¤ò `configure'
¤Ë¤ï¤¿¤µ¤Ê¤¯¤Æ¤Ï¤Ê¤ê¤Þ¤»¤ó¡£¤Ê¤¼¤Ê¤é¡¢PAM
¥â¥¸¥å¡¼¥ë¤Ï¶¦Í­¥é¥¤¥Ö¥é¥ê¤È¤·¤Æ¥í¡¼¥É¤µ¤ì¤Ê¤¯¤Æ¤Ï¤Ê¤é¤Ê¤¤¤«¤é¤Ç¤¹¡£¶¦Í­¥é¥¤¥Ö¥é¥ê¤Ï¡¢
PAM
¥â¥¸¥å¡¼¥ë¤¬Àµ¤·¤¤Áàºî¤ò¤¹¤ë¤¿¤á¤Ë¡¢¼Â¹Ô»þ¤Ë¤ª¤¤¤Æ¤âÍøÍÑ²ÄÇ½¤Ç¤Ê¤¯¤Æ¤Ï¤Ê¤ê¤Þ¤»¤ó¡£PAM
¥â¥¸¥å¡¼¥ë¤Î¹½À®¥¨¥é¡¼¤òÄÉÀ×¤¹¤ë¤¿¤á¤Ë `debug'
°ú¿ô¤òÅÏ¤·¤Æ¤â¤«¤Þ¤¤¤Þ¤»¤ó¡£

¶¦Í­¥é¥¤¥Ö¥é¥ê¤ò¹½ÃÛ¤¹¤ë¤Î¤ËÂÐ¤·¤Æ¡¢¥¹¥¿¥ó¥É¥¢¥í¡¼¥ó¤Î PAM
¥â¥¸¥å¡¼¥ë¡¢¤¹¤Ê¤ï¤Á¡¢Kerberos¤Î¶¦Í­¥é¥¤¥Ö¥é¥ê¤Ë°ÍÂ¸¤·¤Ê¤¤¥â¥¸¥å¡¼¥ë¤òºî¤ë¤³¤È¤â²ÄÇ½¤Ç¤¹¡£¤³¤ì¤ò¹Ô¤¦¤¿¤á¤Ë¤Ï¡¢¥¢¡¼¥«¥¤¥Ö
(`.a')
¥é¥¤¥Ö¥é¥ê¤Ë¥Ý¥¸¥·¥ç¥ó°ÍÂ¸¤Î¥³¡¼¥É¤¬Í×µá¤µ¤ì¤Þ¤¹¡£°Ê²¼¤Î¥¹¥Æ¥Ã¥×¤Ï¥¹¥¿¥ó¥É¥¢¥í¡¼¥ó¤Î
PAM ¥â¥¸¥å¡¼¥ë¤ò¹½ÃÛ¤¹¤ë¤¿¤á¤Ë»È¤¨¤Þ¤¹:

     datan$ env CFLAGS=-fpic ./configure
     datan$ make
     datan$ cd lib/auth/pam
     datan$ make
     datan$ make install

configure ¤Ë `--enable-shared' ¤òÅÏ¤¹¤Ù¤­¤Ç¤Ê¤¤¤³¤È¤ËÃí°Õ¤·¡¢`CFLAGS'
¤ÎÀßÄê¤ËÃí°Õ¤·¤Þ¤¹¡£¤³¤Î¥â¥¸¥å¡¼¥ë¤Ï¡¢¤¿¤È¤¨ Kerberos
¥é¥¤¥Ö¥é¥ê¤¬¥í¡¼¥É¤Ç¤­¤Ê¤¯¤Æ¤â¡¢µ¡Ç½¤¹¤ë¤Ç¤·¤ç¤¦¡£

¤³¤Î¥â¥¸¥å¡¼¥ë¤ò»È¤¦¤Ë¤Ï¼¡¤Î¤è¤¦¤Ë¤¹¤Ù¤­¤Ç¤¹¡§

   * `pam_krb4.so' ¤¬ `/usr/athena/lib' ¤Ç»È¤¨¤ë¤³¤È¤ò³ÎÇ§¤·¤Æ²¼¤µ¤¤¡£
     ¥í¡¼¥«¥ë¥Ç¥£¥¹¥¯¾å¤Ë¤½¤ì¤òÃÖ¤¤¤Æ¤ª¤­¤¿¤¤¤È»×¤¦¤Ç¤·¤ç¤¦¤«¤é¡¢`/usr/athena'
     ¤¬ ¥í¡¼¥«¥ë¥Ç¥£¥¹¥¯¤ÇÌµ¤¤¾ì¹ç¤Ï¡¢ `/lib/security'
     ¤¬¤â¤Ã¤ÈÎÉ¤¤¤«¤ï¤ê¤Î¾ì½ê¤È¤Ê¤ë¤Ç¤·¤ç¤¦¡£

   *
     `/etc/pam.conf'¤Ë²Ã¤¨¤ëÆâÍÆ¤Î»²¹ÍÎã¤È¤·¤Æ¡¢`krb4-1.0.2/lib/auth/pam/pam.conf.add'
     ¤ò¸«¤Æ²¼¤µ¤¤¡£

PAM
¥â¥¸¥å¡¼¥ë¤Ë¥±¥ë¥Ù¥í¥¹¡¦¥Ñ¥¹¥ï¡¼¥É¤òÊÑ¹¹¤¹¤ë¤¿¤á¤Î¥µ¥Ý¡¼¥È¤Ï¸½ºß¤¢¤ê¤Þ¤»¤ó¡£Âå¤ï¤ê¤Ë¡¢kpasswd
¤ò»È¤Ã¤Æ²¼¤µ¤¤¡£

¤³¤Î PAM ¥â¥¸¥å¡¼¥ë¤Ï¡¢
<ftp://ftp.dementia.org/pub/pam>¤Ë¤¢¤ë Derrick J Brashear
`<shadow@dementia.org>' ¤Î Kerberos PAM
¥â¥¸¥å¡¼¥ë¤ËÂ¿Âç¤Ê±Æ¶Á¤ò¼õ¤±¤Æ¤¤¤Þ¤¹¡£

How to set up a realm
*********************

     	Who willed you? or whose will stands but mine?
     	There's none protector of the realm but I.
     	Break up the gates, I'll be your warrantize.
     	Shall I be flouted thus by dunghill grooms?
             -- King Henry VI, 6.1

How to set up the kerberos server
=================================

Choose a realm name
-------------------

¥ì¥ë¥à(realm)¤Ï´ÉÍý¾å¤ÎÎÎ°è¤Ç¤¹¡£¥±¥ë¥Ù¥í¥¹(kerberos)¥ì¥ë¥à¤ÏÄÌ¾ïÂçÊ¸»ú¤Ç½ñ¤«¤ì¤¿(1)¥¤¥ó¥¿¡¼¥Í¥Ã¥È(Internet)¤Î¥É¥á¥¤¥óÌ¾(domain
name)¤Ç¤¹¡£ÆÃÊÌ¤ÊÍýÍ³¤¬Ìµ¤¤¸Â¤ê¡¢¥ì¥ë¥à¤Ë¥¤¥ó¥¿¡¼¥Í¥Ã¥È¡¦¥É¥á¥¤¥óÌ¾¤ÈÆ±¤¸Ì¾Á°¤òÉÕ¤±¤Æ²¼¤µ¤¤¡£¤½¤¦¤¹¤ë¤È¡¢¤¢¤Ê¤¿¤â¤¢¤Ê¤¿¤Î²ó¤ê¤ÎÂ¾¤Î¿Í¡¹¤â³Ú¤Ë¤Ê¤ê¤Þ¤¹¡£

---------- Footnotes ----------

(1)
¥ì¥ë¥àÌ¾¤Ë¾®Ê¸»ú¤ò»È¤¦¤ÈÌ¯¤Ë¤¦¤Þ¤¯¤æ¤­¤Þ¤»¤ó¡£¤³¤ì¤Ï¡¢ËÜÅö¤Ï¤¹¤Ù¤­¤Ê¤Î¤Ç¤¹¤¬¡¢¤Þ¤ÀÄ¾¤µ¤ì¤Æ¤¤¤Þ¤»¤ó¡£

Choose a kerberos server
------------------------

¥±¥ë¥Ù¥í¥¹¡¦¥µ¡¼¥Ð¡¦¥×¥í¥°¥é¥à
¤òÁö¤é¤»¤ë¥Þ¥·¥ó¤òÁªÄê¤¹¤ëÉ¬Í×¤¬¤¢¤ê¤Þ¤¹¡£¤â¤·¡¢¥±¥ë¥Ù¥í¥¹¤Î¥Ç¡¼¥¿¥Ù¡¼¥¹¤¬ºßÎ±¤¹¤ë¥Û¥¹¥È¤¬³«¤±ÅÏ¤µ¤ì¤ë¤È¡¢¤½¤Î¥ì¥ë¥àÁ´ÂÎ¤¬³«¤±ÅÏ¤µ¤ì¤Æ¤·¤Þ¤¦¤³¤È¤Ë¤Ê¤ê¤Þ¤¹¡£¤½¤ì¤æ¤¨¡¢¤³¤Î¥Þ¥·¥ó¤Ï¤Ç¤­¤ë¸Â¤ê°ÂÁ´¤Ç¤Ê¤±¤ì¤Ð¤Ê¤ê¤Þ¤»¤ó¡£¤Ç¤­¤ì¤Ð¡¢¥±¥ë¥Ù¥í¥¹°Ê³°¤Î¥µ¡¼¥Ó¥¹¤òÁö¤é¤»¤ë¤Ù¤­¤Ç¤Ï¤¢¤ê¤Þ¤»¤ó¡£°ÂÁ´¤ËÇÛÎ¸¤¹¤ë´ÉÍý¼Ô¤Î¤ß¤¬¥³¥ó¥½¡¼¥ë¤Ë¥í¥°¥¤¥ó¤¹¤ë¤³¤È¤òµö¤µ¤ì¤ë¤Ù¤­¤Ç¤¹¡£

¤³¤Î¥Þ¥·¥ó¤Ë¤Ï¿®ÍêÀ­¤â¤Ê¤¯¤Æ¤Ï¤Ê¤ê¤Þ¤»¤ó¡£¤â¤·¡¢¤½¤ì¤¬¥À¥¦¥ó¤¹¤ë¤È¡¢¥¹¥ì¡¼¥Ö¡¦¥µ¡¼¥Ð¤òÀßÃÖ¤·¤Æ(see
Install a slave kerberos server)
¤¤¤Ê¤¤¸Â¤ê¡¢Á´¤Æ¤Î¤Î¥±¥ë¥Ù¥í¥¹²½¤µ¤ì¤¿¥µ¡¼¥Ó¥¹¤¬¼õ¤±¤é¤ì¤Ê¤¯¤Ê¤Ã¤Æ¤·¤Þ¤¤¤Þ¤¹¡£

¥±¥ë¥Ù¥í¥¹¡¦¥µ¡¼¥Ð¤òÁö¤é¤»¤ë¤Ë¤Ï¡¢¾¯¤·¤Î CPU
¥Ñ¥ï¡¼¤È¾®¤µ¤Ê¥Ç¥£¥¹¥¯¤¬É¬Í×¤Ê¤À¤±¤Ç¤¹¡£¿ôÉ´¥á¥¬¥Ð¥¤¥È¤Î¶õ¤­¥Ç¥£¥¹¥¯¶õ´Ö¤ò»ý¤Ä¸Å¤¤
PC
¤Ç½½Ê¬¤Ç¤·¤ç¤¦¡£¤Û¤È¤ó¤É¤Î¥Ç¥£¥¹¥¯¶õ´Ö¤ÏÍÍ¡¹¤Êµ­Ï¿(log)¤Î¤¿¤á¤Ë»È¤¨¤ë¤Ç¤·¤ç¤¦¡£

Install the configuration files
-------------------------------

Æó¤Ä¤Î½ÅÍ×¤Ê¹½À®¥Õ¥¡¥¤¥ë(configration files)¡§`/etc/krb.conf' ¤È
`/etc/krb.realms' ¤È¤¬¤¢¤ê¤Þ¤¹¡£

`krb.conf'
¥Õ¥¡¥¤¥ë¤Ç¤Ï¤É¤Î¥Þ¥·¥ó¤¬°Û¤Ê¤ë¥ì¥ë¥à¤Î¥µ¡¼¥Ð¤«¤òÄêµÁ¤·¤Þ¤¹¡£¤³¤Î¥Õ¥¡¥¤¥ë¤Î½ñ¼°¤Ï¡§

     THIS.REALM
     SUPP.LOCAL.REALM
     THIS.REALM              kerberos.this.realm admin server
     THIS.REALM              kerberos-1.this.realm
     SUPP.LOCAL.REALM        kerberos.supp.local.realm admin server
     ANOTHER.REALM           kerberos.another.realm

ºÇ½é¤Î¹Ô¤Ë¤Ï¥í¡¼¥«¥ë¡¦¥ì¥ë¥à¤ÎÌ¾Á°¤òÄêµÁ¤·¤Þ¤¹¡£¤½¤Î¼¡¤«¤é¤Î¿ô¹Ô¤Ï¥ª¥×¥·¥ç¥ó¤Ç¡¢Éû¼¡Åª¤Ê¥í¡¼¥«¥ë¡¦¥ì¥ë¥à¤ÎÌ¾Á°¤Ç¤¹¡£
¤³¤Î¥Õ¥¡¥¤¥ë¤Î»Ä¤ê¤Î¹Ô¤Ï¡¢ÃÎ¤Ã¤Æ¤¤¤ë¤¹¤Ù¤Æ¤Î¥ì¥ë¥à¤Î¥±¥ë¥Ù¥í¥¹¡¦¥µ¡¼¥Ð¤È¥Ç¡¼¥¿¥Ù¡¼¥¹¡¦¥¢¥É¥ß¥Ë¥¹¥È¥ì¡¼¥·¥ç¥ó¡¦¥µ¡¼¥Ð¤ÎÌ¾Á°¤òÄêµÁ¤·¤Æ¤¤¤Þ¤¹¡£4¹ÔÌÜ¤Î¤è¤¦¤Ë½ñ¤±¤Ð¡¢¤³¤Î¥ì¥ë¥à¤Î¥±¥ë¥Ù¥í¥¹¡¦¥¹¥ì¡¼¥Ö¡¦¥µ¡¼¥Ð¤ò´ö¤Ä¤Ç¤âÄêµÁ¤Ç¤­¤Þ¤¹¡£¥¯¥é¥¤¥¢¥ó¥È¤Ï
`krb.conf' ¤ËÎóµó¤µ¤ì¤Æ¤¤¤ë¥µ¡¼¥Ð¤Î½çÈÖ¤ÇÀÜ¿¨¤ò»î¤ß¤Þ¤¹¡£

ºÇ½é¤Îµ­ºÜÊ¸¤Î `admin server' ¶ç¤Ï¡¢¤³¤ì¤¬¥Þ¥¹¥¿¡¦¥µ¡¼¥Ð
(¥Ñ¥¹¥ï¡¼¥É¤ÎÊÑ¹¹¤Î¤è¤¦¤Ê¡¢¥Ç¡¼¥¿¥Ù¡¼¥¹¤ò¹¹¿·¤·¤è¤¦¤È¤¹¤ë¤È¤­¤ËÀÜ¿¨¤¹¤ë¤â¤Î¡£)¤È¤¤¤¦¤³¤È¤Ç¤¹¡£¤³¤ì¤Ï¤½¤ì¤¾¤ì¤Î¥ì¥ë¥àËè¤Ë°ì°Õ¤Ë¤¹¤Ù¤­¤Ç¤¹¡£

¸µ¤Î MIT
Kerberos4¤Ç¤Ï(Â¾¤Î¤Û¤È¤ó¤É¤Ë¤ª¤¤¤Æ¤ÈÆ±ÍÍ¤Ë)¡¢¥µ¡¼¥Ð¤Î»ØÄê¤Ï¥Û¥¹¥ÈÌ¾¤Î·Á¤ò¤È¤ë¤À¤±¤Ç¤¹¡£(¥Õ¥¡¥¤¥¢¥¦¥©¡¼¥ë¤ÎÆâÂ¦¤Î¤è¤¦¤Ê)¸Â¤é¤ì¤¿¾ì½ê¤Ç¥±¥ë¥Ù¥í¥¹¡¦¥µ¡¼¥Ð¤òÀßÃÖ¤¹¤ë¤¿¤á¤Ë¡¢´ûÄê¥Ý¡¼¥È(750)°Ê³°¤Î¥Ý¡¼¥È¤È
UDP °Ê³°¤Î¥×¥í¥È¥³¥ë¤Î¥µ¥Ý¡¼¥È¤¬²Ã¤¨¤é¤ì¤Þ¤·¤¿¡£

¸½ºß¡¢µ­ºÜ¤ÎÀµ¼°¤Ê¹½Ê¸¤Ï`[PROTO/]HOST[:PORT]'¤Ç¤¹¡£PROTO ¤Ï`UDP' ¤«
`TCP' ¤« `HTTP', ¤«¤Ç¡¢PORT ¤ÏÌä¤¤¤«¤±¤ë¥Ý¡¼¥È¤Ç¤¹¡£PROTO ¤Î´ûÄêÃÍ¤Ï
`UDP' ¤Ç PORT ¤Ë¤Ï¡¢`kerberos-iv' ¤¬ `/etc/services'
¤ÎÃæ¤ËÄêµÁ¤µ¤ì¤Æ¤¤¤ì¤Ð¤½¤ì¤ò¡¢¤Ç¤Ê¤ì¤Ð¡¢750 ¤ò´ûÄêÃÍ¤È¤·¤Þ¤¹¡£¤â¤·
PROTO ¤¬ `HTTP' ¤Ç¤¢¤ì¤Ð¡¢´ûÄê¥Ý¡¼¥È¤Ï 80 ¤Ë¤Ê¤ê¤Þ¤¹¡£`HTTP' ¤Îµ­ºÜ¤Ï
URL ½ñ¼°¤Ç¤â»ØÄê¤Ç¤­¤Þ¤¹¡£

  1. ¤â¤·¡¢¥ì¥ë¥à¤Î SRV-¥ì¥³¡¼¥É (`RFC 2052')
     ¤ò»ý¤Ã¤Æ¤¤¤ì¤Ð¤½¤ì¤¬»È¤¨¤Þ¤¹¡£¤³¤Î¥ì¥³¡¼¥É¤Ï
     `kerberos-iv.PROTOCOL.REALM' ¤Î·Á¼°¤Ç¡¢PROTO ¤Ï `udp' ¤« `TCP'
     ¤«¤¢¤ë¤¤¤Ï `HTTP'
     ¤È¤Ê¤ë¤Ù¤­¤Ç¤¹¡£(Ãíµ­¡§¸½ºß¤Î¼ÂÁõ¤Ç¤Ï¤É¤Á¤é¤Î¥µ¡¼¥Ð¤ËÏÃ¤«¤±¤ë¤«¤ò·è¤á¤ë¤¿¤á¤ÎÍ¥ÀèÅÙ¤ä½Å¤ß¤Ë¤Ä¤¤¤Æ¤ÎÀ©¸Â¤Ï¹Ô¤Ê¤¤¤Þ¤»¤ó¡£)

  2. ¤â¤·¡¢SRV-¥ì¥³¡¼¥É¤¬Ìµ¤±¤ì¤Ð¡¢Æ±¥É¥á¥¤¥ó¤Î¤¿¤á¤Î
     TXT-¥ì¥³¡¼¥É¤ò¸«¤Ä¤±¤è¤¦¤È»î¤ß¤Þ¤¹¡£¤½¤Î¥ì¥³¡¼¥É¤ÎÆâÍÆ¤Ï
     `krb.conf'
     ¤ÎÃæ¤Î¥Û¥¹¥È»ØÄê¤Î½ñ¼°¤ÈÆ±¤¸¤Ë¤¹¤Ù¤­¤Ç¤¹¡£(Ãí°Õ:¤â¤·¥Í¡¼¥à¡¦¥µ¡¼¥Ð¤¬
     SRV
     ¥ì¥³¡¼¥É¤ò¥µ¥Ý¡¼¥È¤·¤Ê¤±¤ì¤Ð¡¢¤³¤ì¤¬°ì»þÅª¤Ê²ò·èºö¤È¤Ê¤ê¤Þ¤¹¡£¥¯¥é¥¤¥¢¥ó¥È¤Ï
     SRV
     ¥ì¥³¡¼¥É¤Ç¤â½½Ê¬Æ°¤¯¤Ï¤º¤Ç¡¢¤â¤·¡¢¥Í¡¼¥à¡¦¥µ¡¼¥Ð¤¬¤½¤ì¤é¤ò¥µ¥Ý¡¼¥È¤¹¤ë¤Î¤Ç¤¢¤ì¤Ð¡¢¤½¤Á¤é¤ÎÊý¤¬¹¥¤Þ¤ì¤Þ¤¹¡£)

  3. ¤â¤·¡¢Å¬ÀÚ¤Ê¥±¥ë¥Ù¥í¥¹¡¦¥µ¡¼¥Ð¤¬¸«¤Ä¤«¤é¤Ê¤±¤ì¤Ð¡¢UDP ¤Ç¥µ¡¼¥Ó¥¹
     `kerberos-iv' ¤ËÌä¤¤¤«¤±¤è¤¦¤È¤·¡¢750
     ¤òÍî¤ÁÃå¤­Àè¤Î¥Ý¡¼¥È¤È¤·¤Æ¡¢(¥Þ¥¹¥¿¡¦¥µ¡¼¥Ð¤È²áÄø¤µ¤ì¤ë)
     `kerberos.REALM'
     ¤Ø¡¢¤½¤ì¤«¤é¡¢`kerberos-1.REALM'¡¢¤½¤·¤Æ¡¢`kerberos-2.REALM'¤Î½ç¤Ë»î¤·¤Þ¤¹¡£

SRV ¥ì¥³¡¼¥É¤Ï BIND 4.9.5T2A
°Ê¹ß¤Ç¥µ¥Ý¡¼¥È¤µ¤ì¤Æ¤¤¤Þ¤¹¡£¥¾¡¼¥ó¡¦¥Õ¥¡¥¤¥ë¤Î
µ­½ÒÎã¤Ï¼¡¤Î¤è¤¦¤Ë¤Ê¤ê¤Þ¤¹¡§

     kerberos-iv.udp.foo.se.  1M IN SRV  1 0 750 kerberos-1.foo.se.
     kerberos-iv.udp.foo.se.  1M IN SRV  0 0 750 kerberos.foo.se.

¥±¥ë¥Ù¥í¥¹¡¦¥Þ¥¹¥¿¡¦¥µ¡¼¥Ð¤ò»Ø¤¹ CNAME `kerberos.REALM'
¤ò²Ã¤¨¤ë¤³¤È¤ò¡¢¶¯¤¯¤ª¾©¤á¤·¤Þ¤¹¡£

`krb.realms'
¥Õ¥¡¥¤¥ë¤ÏÆÃÄê¤Î¥Û¥¹¥È¤¬¤É¤Î¥ì¥ë¥à¤ËÂ°¤¹¤ë¤«¤ò¸«¤Ä¤±½Ð¤¹¤Î¤Ë»È¤ï¤ì¤Þ¤¹¡£¤³¤Î¥Õ¥¡¥¤¥ë¤ÎÎã¤Ï°Ê²¼¤ÎÄÌ¤ê¤Ç¤¹¡§

     this.realm            THIS.REALM
     .this.realm           THIS.REALM
     foo.com               SOME.OTHER.REALM
     www.foo.com           A.STRANGE.REALM
     .foo.com              FOO.REALM

ÅÀ('.')¤«¤é»Ï¤Þ¤ëµ­ºÜ¤Ï¥É¥á¥¤¥óÌ¾¤È¤·¤Æ¡¢ÅÀ¤Ç»Ï¤Þ¤é¤Ê¤¤µ­ºÜ¤Ï¥Û¥¹¥ÈÌ¾¤È¤·¤Æ²ò¼á¤µ¤ì¤Þ¤¹¡£ºÇ½é¤Ë¹çÃ×¤·¤¿µ­ºÜ¤¬»È¤ï¤ì¤Þ¤¹¡£`this.realm'
¤Îµ­ºÜ¤Ï`this.realm' ¤È¤¤¤¦Ì¾Á°¤Î¥Û¥¹¥È¤¬¤¢¤ë¾ì¹ç¤Ë¤Î¤ßÉ¬Í×¤Ç¤¹¡£

¤â¤·¡¢¹çÃ×¤¹¤ë¥ì¥ë¥à¤¬ `krb.realms'
¤ÎÃæ¤Ë¸«¤Ä¤«¤é¤Ê¤±¤ì¤Ð¡¢Àµ¤·¤¤¥ì¥ë¥à¤Î¤¿¤á¤Ë DNS
¤ÇÁÜ¤·¤Þ¤¹¡£¤¿¤È¤¨¤Ð¡¢¤â¤·¥Û¥¹¥È `a.b.c' ¤òÁÜ¤·¤Æ¤¤¤ë¤È¤¹¤ë¤È¡¢ºÇ½é¤Ï
`krb4-realm.a.b.c' ¤¬»î¤µ¤ì¡¢¤½¤·¤Æ `krb4-realm.b.c'
¤¬¤È¤¤¤¦¶ñ¹ç¤Ë¤Ê¤ê¤Þ¤¹¡£¤½¤Îµ­ºÜ¤Ï¼¡¤Î¤è¤¦¤Ë¡¢¥ì¥ë¥àÌ¾¤ò´Þ¤à TXT
¥ì¥³¡¼¥É¤Ë¤¹¤ë¤Ù¤­¤Ç¤¹¡£

     krb4-realm.pdc.kth.se.  7200    TXT     "NADA.KTH.SE"

¤â¤·¡¢¤³¤ì¤¬¥É¥á¥¤¥óÌ¾¤ËÌµ¤±¤ì¤Ð¡¢ºÇ½é¤ÎÉôÊ¬¤¬ÂçÊ¸»ú¤Î¤â¤Î¤¬»î¤µ¤ì¤Þ¤¹¡£

¤â¤È¤Î´ÊÁÇ¤Ê¥±¥ë¥Ù¥í¥¹¤Ç¤Ï¡¢¥µ¡¼¥Ð¤È¥ì¥ë¥à¤òÆÀ¤ë¤¿¤á¤Î¹¤È´¤±¤¿ÊýË¡¤ò»ý¤¿¤Ê¤¤¤Î¤Ç¡¢°ìÈÌÅª¤Ë¤Ï
`krb.conf' ¤È `krb.realms' ¤ò¤¤¤Ä¤âºÇ¿·¤Ë¤·¤Æ¤ª¤¯¤³¤È¤¬ÎÉ¤¤¹Í¤¨¤Ç¤¹¡£

¤³¤ì¤é¤Î°ìÈÌ¤Ë»È¤¦¥Õ¥¡¥¤¥ë¤Ë²Ã¤¨¤Æ¡¢`/etc/krb.extra'
¤Ï¡¢ÄÌ¾ï¤Ï»È¤ï¤Ê¤¤¤â¤Î¤òÆâÊñ¤·¤Þ¤¹¡£¤½¤ì¤Ï¡¢`VARIABLE = VALUE'
¤ÎÁÈ¤«¤éÀ®¤ê¡¢¶õ¹Ô¤È (#) ¤Ç»Ï¤Þ¤ë¹Ô¤ÏÌµ»ë¤µ¤ì¤Þ¤¹¡£

¸½ºß¡¢ÄêµÁ¤µ¤ì¤Æ¤¤¤ëÊÑ¿ô¤ò°Ê²¼¤Ë¼¨¤·¤Þ¤¹¡£¥Ö¡¼¥ê¥¢¥ó¡¿¥Õ¥é¥Ã¥°¤ÎÊÑ¿ô¤Ï
`true' ¤Þ¤¿¤Ï `yes' ¤â¤·¤¯¤Ï ¥¼¥í°Ê³°¤ÎÀµ¿ô¤Ç¤¹¡£

`kdc_timeout'
     KDC¤«¤é¤ÎÅú¤òÂÔ¤ÄÉÃÃ±°Ì¤Î»þ´Ö(´ûÄêÃÍ¤Ï 4 ÉÃ)¡£

`kdc_timesync'
     ¤³¤Î¥Õ¥é¥°¤ÏºÇ½é¤ÎÀÚÉä¤òÆÀ¤ë»þ¤Ë KDC
     ¤Ø¤Î»þ´ÖÈùÊ¬¤ÎÊÝÂ¸¤ò²ÄÇ½¤Ë¤·¤Þ¤¹¡£
     ¤³¤ÎÈùÊ¬¤Ï¸å¤Ç¸½ºß¤Î»þ´Ö¤ò·×»»¤¹¤ë¤Î¤Ë»È¤¤¤Þ¤¹¡£¤³¤ì¤Ï¥Þ¥·¥ó¤Î¥¯¥í¥Ã¥¯
     ¤¬Æ°¤¤¤Æ¤Ê¤¤»þ¤Î½õ¤±¤È¤Ê¤êÆÀ¤Þ¤¹¡£

`firewall_address'
     ¥Õ¥¡¥¤¥¢¥¦¥©¡¼¥ë¤ÎÆâÂ¦¤«¤é¥Õ¥¡¥¤¥¢¥¦¥©¡¼¥ë¤Î³°¤Î¥Û¥¹¥È¤Ë·Ò¤°¤È¤­¤Ë¸«¤ë
     IP
     ¥¢¥É¥ì¥¹¤Ç¤¹¡£¤â¤·¡¢¤³¤ì¤¬»ØÄê¤µ¤ì¤Æ¤¤¤ì¤Ð¥×¥í¥°¥é¥à¤Ï¡¢`reverse_lsb_test'
     ¤Î¤¿¤á¤ÎÃÍ¤ò·×»»¤·¤è¤¦¤È¤·¤Þ¤¹¡£

`krb4_proxy'
     HTTP
     ¤«¤é¥Á¥±¥Ã¥È¤òÆÀ¤ë»þ¤Ë»ÈÍÑ¤¹¤ë¥×¥í¥¯¥·¤ò»ØÄê¤·¤Þ¤¹¡£´ûÄê¤Ç¤ÏÄ¾ÀÜ
     KDC ¤ËÏÃ¤«¤±¤Þ¤¹¡£

`krb_default_tkt_root'
     ¥Á¥±¥Ã¥È¡¦¥Õ¥¡¥¤¥ë¤Î´ûÄê¤ÎÁ°ÃÖÅº»ú¤Ç¤¹¡£´ûÄê¤Ç¤Ï `/tmp/tkt'
     ¤Ç¤¹¡£ÄÌ¾ï¤Ï¤½¤ì¤Î¸åÃÖÅº»ú¤È¤·¤Æ uid ¤È tty ¤¬ÉÕ¤±²Ã¤¨¤é¤ì¤Þ¤¹¡£

`krb_default_keyfile'
     ¥µ¡¼¥Ð¤Î¸°¤¬ÊÝÂ¸¤µ¤ì¤ë¥Õ¥¡¥¤¥ë¤Î¾ì½ê¤ò¼¨¤·¤Þ¤¹¡£´ûÄê¤Ç¤Ï
     `/etc/srvtab' ¤È¤Ê¤ê¤Þ¤¹¡£

`nat_in_use'
     ¥¯¥é¥¤¥¢¥ó¥È¤¬ Network Address Translator (NAT)
     ¤Î¸å¤í¤Ë¤¢¤ë¤³¤È¤ò»ØÄê¤¹¤ë¥Õ¥é¥Ã¥°¤Ç¤¹¡£

`reverse_lsb_test'
     ÄÌ¿®¤·¤Æ¤¤¤ë¥Û¥¹¥È¤Î½çÈÖ¤ò·×»»¤¹¤ë¤Î¤Ë»È¤ï¤ì¤ë¡¢`krb_mk_safe',
     `krb_rd_safe', `krb_mk_priv', ¤ª¤è¤Ó`krb_rd_priv' ¤Ë¤è
     ¤ë¥Æ¥¹¥È½çÈÖ¤ò¤Ò¤Ã¤¯¤êÊÖ¤·¤Þ¤¹¡£¤³¤Î¥Æ¥¹¥È¤Ï¥Õ¥¡¥¤¥¢¥¦¥©¡¼¥ë¤ò»È¤¦»þ¤ËÌäÂê¤òµ¯¤³¤·ÆÀ¤Þ¤¹¡£

Updating /etc/services
----------------------

`services.append' ¤ÎÆâÍÆ¤ò¤ò `/etc/services' ¤Þ¤¿¤Ï NIS-map
¤ËÄÉ²Ã¤¢¤ë¤¤¤Ïº®¹ç¤¹¤ë¤Ù¤­¤Ç¤¹¡£½Ð²Ù»þÀßÄê¤Î»È¤ï¤Ê¤¤¥±¥ë¥Ù¥í¥¹¤Î¥Ý¡¼¥ÈÄêµÁ¤Ï¡¢º®Íð¤Î²ÄÇ½À­¤òÈò¤±¤ë¤¿¤á¤Ëºï½ü¤·¤Æ²¼¤µ¤¤¡£

¤Û¤È¤ó¤É¤Î¥×¥í¥°¥é¥à¤Ï `/etc/services'
¤Ë¥Ý¡¼¥ÈÈÖ¹æ¤¬¸«¤Ä¤«¤é¤Ê¤±¤ì¤Ð¡¢´ûÄê¤Î¥Ý¡¼¥È¤È¤Ê¤ë¤Ç¤·¤ç¤¦¤¬¡¢¤¤¤º¤ì¤Ë¤·¤í¤½¤³¤Ë¤¢¤Ã¤¿Êý¤¬ÊØÍø¤Ç¤¹¡£

Install the kerberos server
---------------------------

´û¤Ë¥±¥ë¥Ù¥í¥¹¡¦¥µ¡¼¥Ð¤òÁö¤é¤»¤ë¥Þ¥·¥ó¤È¥ì¥ë¥àÌ¾¤òÁª¤ó¤Ç¤¤¤ë¤Ï¤º¤Ç¤¹¡£¤½¤Î¥Þ¥·¥ó¤Ï¥±¥ë¥Ù¥í¥¹¡¦¥µ¡¼¥Ð¤ò¥¤¥ó¥¹¥È¡¼¥ë¤¹¤ëÁ°¤Ë²ÄÇ½¤Ê¸Â¤ê°ÂÁ´¤Ë¤·¤Æ¤¢¤ë¤Ï¤º¤Ç¤¹(see
Choose a kerberos server)
¡£¤³¤³¤Ç¤ÎÎã¤Ç¤Ï¡¢¥±¥ë¥Ù¥í¥¹¡¦¥µ¡¼¥Ð¤ò`FOO.SE' ¤È¤¤¤¦¥ì¥ë¥à¤Ç
`hemlig.foo.se' ¤È¸Æ¤Ð¤ì¤ë¥Þ¥·¥ó¤Ë¥¤¥ó¥¹¥È¡¼¥ë¤¹¤ë¤³¤È¤Ë¤·¤Þ¤¹¡£

Setup the server
----------------

¥±¥ë¥Ù¥í¥¹¡¦¥µ¡¼¥Ð¤Î¥³¥ó¥½¡¼¥ë¤Ë root ¤Ç¥í¥°¥¤¥ó¤·¤Þ¤¹¡£
`/usr/athena/bin' ¤È `/usr/athena/sbin' ¤ò¥³¥Þ¥ó¥É¡¦¥Ñ¥¹¤Ë²Ã¤¨¤Þ¤¹¡£
¥Ç¡¼¥¿¥Ù¡¼¥¹¤òÊÝÂ¸¤¹¤ë¤¿¤á¤Î¥Ç¥£¥ì¥¯¥È¥ê`/var/kerberos' ¤òºî¤ê (`mkdir
/var/kerberos')¡¢`kdb_init'¤òÁö¤é¤»¤Þ¤¹¡£:

     hemlig# mkdir /var/kerberos
     hemlig# kdb_init
     Realm name [default  FOO.SE ]:
     You will be prompted for the database Master Password.
     It is important that you NOT FORGET this password.

     Enter Kerberos master password:
     Verifying password
     Enter Kerberos master password:

¤â¤·¡¢¹½À®¥Õ¥¡¥¤¥ë¤òÀµ¤·¤¯ÀßÄê¤·¤Æ¤¤¤¿¤Ê¤é¤Ð¡¢`kdb_init'
¤ÏÀµ¤·¤¤¥ì¥ë¥à¤ò´ûÄêÃÍ¤È¤·¤ÆÁª¤Ö¤Ï¤º¤Ç¤¹¡£¤Ç¤Ê¤±¤ì¤Ð¡¢(¤¦¤Þ¤¤)¿äÄê¤ò¤·¤Þ¤¹¡£¥Þ¥¹¥¿¡¦¥Ñ¥¹¥ï¡¼¥É¤ò
ÆþÎÏ¤·¤Þ¤¹¡£

¤³¤Î¥Ñ¥¹¥ï¡¼¥É¤Ï¥Ç¥£¥¹¥¯¾å¤Î¥±¥ë¥Ù¥í¥¹¡¦¥Ç¡¼¥¿¥Ù¡¼¥¹¤ò°Å¹æ²½¤¹¤ë¤¿¤á¤È¿·¤·¤¤¥é¥ó¥À¥à¡¦¥­¡¼¤òÀ¸À®¤¹¤ë¤¿¤á¤Ë¤À¤±»È¤ï¤ì¤Þ¤¹¡£¤½¤ì¤ò³Ð¤¨¤Æ¤ª¤¯É¬Í×¤Ï¤¢¤ê¤Þ¤»¤ó¡£`kstash'
¤òÁö¤é¤»¤ë»þ¤Ë¤â¤¦°ìÅÙÂÇ¤Á¹þ¤à¤À¤±¤Ç¤¹¡£Ä¹¤¯¤Æ¤Ç¤¿¤é¤á¤Ê¤â¤Î¤òÁª¤Ó¤Þ¤·¤ç¤¦¡£¤½¤·¤Æ¡¢Æ±¤¸¥Ñ¥¹¥ï¡¼¥É¤ò»È¤Ã¤Æ
`kstash' ¤òÁö¤é¤»¤Þ¤¹¡£:

     hemlig# kstash

     Enter Kerberos master password:

     Current Kerberos master key version is 1.

     Master key entered.  BEWARE!
     Wrote master key to /.k

Æ±¤¸¥Þ¥¹¥¿¡¦¥Ñ¥¹¥ï¡¼¥É¤òÆþÎÏ¤¹¤ë¤È¡¢¤½¤ì¤Ï¥Õ¥¡¥¤¥ë `/.k'
¤ËÊÝÂ¸¤µ¤ì¡¢¤½¤·¤Æ¡¢¥±¥ë¥Ù¥í¥¹¡¦¥µ¡¼¥Ð¤ÏÉ¬Í×¤Ë¤Ê¤ë¤È¤½¤ì¤òÆÉ¤ß½Ð¤·¤Þ¤¹¡£¤â¤·¤«¤¹¤ë¤È¡¢¥Ç¥£¥¹¥¯¤¬ÄÙ¤ì¤¿¤ê¡¢¥¹¥ì¡¼¥Ö¡¦¥µ¡¼¥Ð¤òÀßÄê¤·¤¿¤¤»×¤¦¤Ç¤·¤ç¤¦¤«¤é¡¢¥Þ¥¹¥¿¡¦¥Ñ¥¹¥ï¡¼¥É¤ò½ñ¤¤¤¿¤â¤Î¤òÉõÅû¤ËÆþ¤ì¤ÆÉõ¤ò¤·¤Æ°ÂÁ´¤Ê¤È¤³¤í¤Ë¤ª¤­¤Þ¤·¤ç¤¦¡£

`kdb_init' ¥Ç¡¼¥¿¥Ù¡¼¥¹¤òºÇ¾®¤Îµ­ºÜ¤Ç½é´ü²½¤·¤Þ¤¹:

`krbtgt.REALM'
     ¥±¥ë¥Ù¥í¥¹¡¦¥µ¡¼¥Ð¤Ø¤ÎÇ§¾Ú¤ò¤¹¤ë¤¿¤á¤Ë»È¤¦¸°¡£

`changepw.kerberos'
     ´ÉÍý¥µ¡¼¥Ð¤Ø¤ÎÇ§¾Ú¤ò¤¹¤ë¤¿¤á¤Ë»È¤¦¸°¡£Îã¤¨¤Ð¡¢¥æ¡¼¥¶¤ÎÄÉ²Ã¡¢¥Ñ¥¹¥ï¡¼¥É¤ó¤ÎÊÑ¹¹¤Ê¤É¡£

`default'
     ¤³¤Îµ­ºÜ¤Ï¿·¤·¤¤¹àÌÜ¤¬²Ã¤¨¤é¤ì¤¿»þ¤Ë¥³¥Ô¡¼¤µ¤ì¤Þ¤¹¡£¿·¤·¤¤µ­ºÜ¤Ë»ý¤¿¤»¤¿¤¤ÃÍ¡¢ÆÃ¤ËÍ­¸ú´ü¸Â¤¬¤³¤³¤ËÆþ¤ê¤Þ¤¹¡£

`K.M'
     ¤³¤ì¤Ï¥Þ¥¹¥¿¸°¤Ç¡¢°Å¹æ²½¤·¤Ê¤¤¤Ç `/.k'
     ¤ÎÃæ¤ËÊÝÂ¸¤µ¤ì¤Æ¤¤¤ë¥Þ¥¹¥¿¸°¤¬¤³¤Î¥Ç¡¼¥¿¥Ù¡¼¥¹¤ËÂÐ¤·Àµ¤·¤¤¤«¤ò¾ÚÌÀ¤¹¤ë¤¿¤á¤À¤±¤Ë»È¤ï¤ì¤Þ¤¹¡£

`kstash' ¤Ï¡¢¥Þ¥¹¥¿¡¦¥Ñ¥¹¥ï¡¼¥É¤òÆÉ¤ó¤Ç¡¢¥Õ¥¡¥¤¥ë
`/.k'¤Ë½ñ¤­¹þ¤à¤À¤±¤Ç¤¹¡£¤³¤ì¤Ë¤è¤Ã¤Æ¡¢¥Þ¥¹¥¿¡¦¥Ñ¥¹¥ï¡¼¥É¤òÆþÎÏ¤¹¤ë¤³¤È¤Ê¤¯¡¢¥±¥ë¥Ù¥í¥¹¡¦¥µ¡¼¥Ð¤òµ¯Æ°¤¹¤ë¤³¤È¤ò²ÄÇ½¤Ë¤·¤Þ¤¹¡£¤³¤Î¥Õ¥¡¥¤¥ë
(`/.k') ¤Ï¡¢¤½¤ì¤¬Â¸ºß¤¹¤ë "°ÂÁ´¤Ê" ¥Þ¥·¥ó¾å¤Î root
¥æ¡¼¥¶¤Ë¤Î¤ßÆÉ¤ß½Ð¤·¤¬²ÄÇ½¤Ç¤¹¡£

Add a few important principals
------------------------------

¤³¤ì¤Ç¡¢ºÇ¾®¤Î¥×¥ê¥ó¥·¥Ñ¥ë¤ò´Þ¤ó¤À¥±¥ë¥Ù¥í¥¹¤Î¥Ç¡¼¥¿¥Ù¡¼¥¹¤¬¤Ç¤­¤Þ¤·¤¿¡£¼¡¤Î¥¹¥Æ¥Ã¥×¤Ç¤Ï¥×¥ê¥ó¥·¥Ñ¥ë¤ò¹¹¤Ë¤â¤¦¾¯¤·²Ã¤¨¡¢¤½¤·¤Æ¡¢¤­¤Á¤ó¤ÈÆ°¤¯¤³¤È¤ò¥Æ¥¹¥È¤·¤Æ¡¢¤½¤ì¤«¤é¡¢¥±¥ë¥Ù¥í¥¹¡¦¥µ¡¼¥Ð¤Î¥³¥ó¥½¡¼¥ë¤ò»È¤ï¤Ê¤¤¤Ç¥ì¥ë¥à¤Î´ÉÍý¤ò¤¹¤ë¤³¤È¤¬¤Ç¤­¤Þ¤¹¡£`kdb_edit'¤ò»È¤Ã¤Æ¥±¥ë¥Ù¥í¥¹¡¦¥µ¡¼¥Ð¤Î¥Ç¡¼¥¿¥Ù¡¼¥¹¤òÊÔ½¸¤·¤Þ¤¹¡£

`kdb_edit'
¤Ï¥Ç¡¼¥¿¥Ù¡¼¥¹¤ÎÊÔ½¸¤ËºÝ¤·¡¢Î©¤Á¾å¤²(bootstrapping)¤È¸åÌá¤ê(fall-back)µ¡¹½¤Î¤¿¤á¤Ë°Õ¿Þ¤µ¤ì¤¿¤â¤Î¤Ç¤¹¡£ÉáÄÌ¤ÎÌÜÅª¤Ë¤Ï¡¢`kadmin'
¥×¥í¥°¥é¥à¤ò»È¤¤¤Þ¤¹(see Add users to the database)¡£

¼¡¤ÎÎã¤Ï `nisse.admin'
¤ò¥±¥ë¥Ù¥í¥¹¡¦¥Ç¡¼¥¿¥Ù¡¼¥¹¤ÎÃæ¤Ë²Ã¤¨¤ë¤È¤³¤í¤ò¼¨¤·¤Þ¤¹¡£¤³¤Î¥×¥ê¥ó¥·¥Ñ¥ë¤Ï¥±¥ë¥Ù¥í¥¹¡¦¥Ç¡¼¥¿¥Ù¡¼¥¹¤ò´ÉÍý¤¹¤ë»þ¤Ë
`nisse' ¤Ë¤è¤Ã¤Æ»È¤ï¤ì¤Þ¤¹¡£¤¢¤È¤Ç `nisse'
¤Î¤¿¤á¤ÎÀµ¾ï¤Ê¥×¥ê¥ó¥·¥Ñ¥ë¤¬¤Ä¤¯¤é¤ì¤Þ¤¹¡£`nisse' ¤È `password'
¤È¤ò¼«Ê¬¤Î¥æ¡¼¥¶Ì¾¤È¥Ñ¥¹¥ï¡¼¥É¤È¤ËÃÖ¤­´¹¤¨¤Æ²¼¤µ¤¤¡£

     hemlig# kdb_edit -n
     Opening database...
     Current Kerberos master key version is 1.

     Master key entered.  BEWARE!
     Previous or default values are in [brackets] ,
     enter return to leave the same, or new value.

     Principal name: <nisse>
     Instance: <admin>

     <Not found>, Create [y] ? <>

     Principal: nisse, Instance: admin, kdc_key_ver: 1
     New Password: <password>
     Verifying password
     New Password: <password>

     Principal's new key version = 1
     Expiration date (enter yyyy-mm-dd) [ 2000-01-01 ] ? <>
     Max ticket lifetime (*5 minutes) [ 255 ] ? <>
     Attributes [ 0 ] ? <>
     Edit O.K.
     Principal name: <>

`kdb_edit' ¤Ï "Principal name" ¤Î¥×¥í¥ó¥×¥È¤Ë `return'
¤òÂÇ¤Ä¤Þ¤Ç·«¤êÊÖ¤·¤Þ¤¹¡£¤³¤ì¤Ç¡¢nisse ¤ò´ÉÍý¼Ô¤È¤·¤ÆÅÐÏ¿¤·¤Þ¤·¤¿¡£

Start the server
----------------

     hemlig# /usr/athena/libexec/kerberos &
     Kerberos server starting
     Sleep forever on error
     Log file is /var/log/kerberos.log
     Current Kerberos master key version is 1.

     Master key entered.  BEWARE!

     Current Kerberos master key version is 1
     Local realm: FOO.SE

Try to get tickets
------------------

¿ë¤Ë¡¢ÄÉ²Ã¤·¤¿¥×¥ê¥ó¥·¥Ñ¥ë¤È¥µ¡¼¥Ð¤¬Àµ¤·¤¯Æ°¤¯¤³¤È¤ò¾ÚÌÀ¤¹¤ë¤³¤È¤¬¤Ç¤­¤Þ¤¹¡£

     hemlig# kinit
     eBones International (hemlig.foo.se)
     Kerberos Initialization
     Kerberos name: <nisse.admin>
     Password: <password>

¤â¤·¡¢`kinit' ¤«¤é¤Ê¤Ë¤â¥¨¥é¡¼¤ò¼õ¤±¼è¤é¤Ê¤±¤ì¤Ð¡¢Á´¤ÆÆ°¤¤¤Æ¤¤¤Þ¤¹¡£
(¤Ç¤Ê¤±¤ì¤Ð¡¢ See Common error messages ¤ò¸æÍ÷²¼¤µ¤¤¡£) `klist'
¤ò»È¤¨¤Ð¡¢`kinit' ¤ÇÆÀ¤é¤ì¤¿ÀÚÉä¤ò¸¡¾Ú¤Ç¤­¤Þ¤¹¡§

     hemlig# klist
     Ticket file:    /tmp/tkt0
     Principal:      nisse.admin@FOO.SE

     Issued           Expires          Principal
     May 24 21:06:03  May 25 07:06:03  krbtgt.FOO.SE@FOO.SE

Create initial ACL for the admin server
---------------------------------------

´ÉÍý¥µ¡¼¥Ð `kadmind'
¤Ï¡¢°ìÏ¢¤Î¥Õ¥¡¥¤¥ë¤ò»È¤Ã¤ÆÃ¯¤¬²¿¤ÎÁàºî¤ò¤¹¤ë¸¢Íø¤ò»ý¤Ä¤«¤ò·èÄê¤·¤Þ¤¹¡£¤½¤ì¤é¤Î¥Õ¥¡¥¤¥ë¤Ï¡§

`admin_acl.add', `admin_acl.get', `admin_acl.del', ¤ª¤è¤Ó
`admin_acl.mod'¤Ç¤¹¡£`nisse.admin@FOO.SE'
¤ò¤½¤ÎÆâÍÆ¤Ë²Ã¤¨¤ë¤Ë¤Ï¼¡¤Î¤è¤¦¤Ë¤·¤Þ¤¹:

     hemlig# echo "nisse.admin@FOO.SE" >> /var/kerberos/admin_acl.add
     hemlig# echo "nisse.admin@FOO.SE" >> /var/kerberos/admin_acl.get
     hemlig# echo "nisse.admin@FOO.SE" >> /var/kerberos/admin_acl.mod
     hemlig# echo "nisse.admin@FOO.SE" >> /var/kerberos/admin_acl.del

¸å¤Ç¡¢´ÉÍý¼Ô¸¢¸Â¤ò¤µ¤é¤ËÂ¿¤¯¤Î¥æ¡¼¥¶¤ò²Ã¤¨¤¿¤±¤ì¤Ð¡¢¤½¤ì¤¾¤ì¤Î´ÉÍýÍÑ¥×¥ê¥ó¥·¥Ñ¥ë¤òºî¤Ã¤Æ¤½¤ì¤é¤ò´ÉÍý¥µ¡¼¥Ð¤Î
ACL ¤Ë²Ã¤¨¤ë¤³¤È¤òËº¤ì¤Ê¤¤¤Ç²¼¤µ¤¤¡£

Start the admin server
----------------------

     hemlig# /usr/athena/libexec/kadmind &
     KADM Server KADM0.0A initializing
     Please do not use 'kill -9' to kill this job, use a
     regular kill instead

     Current Kerberos master key version is 1.

     Master key entered.  BEWARE!

Add users to the database
-------------------------

`kadmin' ¥¯¥é¥¤¥¢¥ó¥È¤ò»È¤Ã¤Æ¥æ¡¼¥¶¤ò¥Ç¡¼¥¿¥Ù¡¼¥¹¤Ë²Ã¤¨¤Þ¤¹¡§

     hemlig# kadmin -p nisse.admin -m
     Welcome to the Kerberos Administration Program, version 2
     Type "help" if you need it.
     admin:  <add nisse>
     Admin password: <nisse.admin's password>
     Maximum ticket lifetime?  (255)  [Forever]
     Attributes?  [0x00]
     Expiration date (enter yyyy-mm-dd) ?  [Sat Jan  1 05:59:00 2000]
     Password for nisse:
     Verifying password Password for nisse:
     nisse added to database.

Â¾¤Î¥æ¡¼¥¶¤â²Ã¤¨¤¿¤±¤ì¤ÐÆ±ÍÍ¤Ë¹Ô¤Ê¤¤¤Þ¤¹¡£¼¡¤Ë¡¢¥æ¡¼¥¶¤¬¥Ç¡¼¥¿¥Ù¡¼¥¹¤ÎÃæ¤Ë¤¢¤ë¤³¤È¤ò¸¡¾Ú¤·¡¢¤½¤Î¥æ¡¼¥¶¤Î¥Ç¡¼¥¿¥Ù¡¼¥¹¤Îµ­ºÜ¤ò³ÎÇ§¤·¤Þ¤¹¡£

     admin:  <get nisse>
     Info in Database for nisse.:
     Max Life: 255 (Forever)   Exp Date: Sat Jan  1 05:59:59 2000

     Attribs: 00  key: 0 0
     admin:  <^D>
     Cleaning up and exiting.

Automate the startup of the servers
-----------------------------------

¥¹¥¿¡¼¥È¥¢¥Ã¥×¡¦¥¹¥¯¥ê¥×¥È(`/etc/rc'
¤¢¤ë¤¤¤Ï¤½¤ì¤ÈÆ±Åù¤Ê¤â¤Î)¤Ë¥±¥ë¥Ù¥í¥¹¡¦¥µ¡¼¥Ð¤È´ÉÍý¥µ¡¼¥Ð¤ò»ÏÆ°¤¹¤ë¤¿¤á¤Ë»È¤ï¤ì¤ë¹Ô¤ò²Ã¤¨¤Þ¤¹¡£

Install the client programs
===========================

¥±¥ë¥Ù¥í¥¹¡¦¥¯¥é¥¤¥¢¥ó¥È¤Î¥Þ¥·¥ó¤ò¤Ä¤¯¤ë¤Î¤Ï¤Û¤ó¤Î¿ôÃÊ³¬¤Ç¤¹¡£ºÇ½é¤Ë¹½À®¥Õ¥¡¥¤¥ë¤Î¥±¥ë¥Ù¥í¥¹¡¦¥µ¡¼¥Ð¤ÎÊÑ¹¹¤ò¤¹¤ëÉ¬Í×¤¬¤¢¤ë¤Ç¤·¤ç¤¦¡£(see
Install the configuration files ¤ª¤è¤Ó Install the /etc/services
¡£)¤µ¤é¤Ë¡¢`/usr/athena/bin'
¤Ë¤¢¤ë¥×¥í¥°¥é¥à¤òÍøÍÑ²ÄÇ½¤Ë¤¹¤ëÉ¬Í×¤¬¤¢¤ê¤Þ¤¹¡£¤³¤ì¤Ï¡¢¥æ¡¼¥¶¤Î¥Ñ¥¹¤Ë¡¢¤½¤ì¤ò²Ã¤¨¤ë¤«¡¢¥·¥ó¥Ü¥ê¥Ã¥¯¡¦¥ê¥ó¥¯¤Ë¤¹¤ë¤«¡¢¤¢¤ë¤¤¤Ï¡¢¥×¥í¥°¥é¥à¤ò¥³¥Ô¡¼¤¹¤ë¤«¤Ë¤è¤Ã¤Æ¤Ç¤­¤Þ¤¹¡£

¤µ¤é¤Ë¡¢¤Ê¤ó¤é¤«¤ÎÊýË¡¤Ç¡¢¥¯¥é¥¤¥¢¥ó¥È¾å¤Î»þ¹ï¤¬¥±¥ë¥Ù¥í¥¹¡¦¥µ¡¼¥Ð¤Î»þ¹ï¤ÈÆ±´ü¤·¤Æ¤¤¤ë¤³¤È¤ò¾ÚÌÀ¤¹¤ë¤Ù¤­¤Ç¤·¤ç¤¦¡£Æ±Ä´¤¹¤ë¥µ¡¼¥Ð¤È¥¯¥é¥¤¥¢¥ó¥È¤È¤ÎÎ¾¼Ô¤Î´Ö¤Ç¡¢µö¤µ¤ì¤ë»þ´Ö¤Îº¹¤ÏºÇÂç5Ê¬¤Ç¤¹¡£

»þ¹ï¤òÆ±´ü¤µ¤»¤ë¤Î¤ËÎÉ¤¤ÊýË¡¤Î°ì¤Ä¤È¤·¤Æ NTP (Network Time Protocol)
¤¬¤¢¤ê¤Þ¤¹¡£ <http://www.eecis.udel.edu/~ntp/> ¤ò¸æÍ÷²¼¤µ¤¤¡£

¤â¤·¡¢root-¥¢¥¯¥»¥¹¸¢¤ò»ý¤¿¤Ê¤¤¥Þ¥·¥ó¤Ç¥¯¥é¥¤¥¢¥ó¥È¡¦¥×¥í¥°¥é¥à¤òÁö¤é¤»¤ëÉ¬Í×¤¬¤¢¤ë¤È¤·¤Æ¤â¡¢¤ªË¾¤ßÄÌ¤ê¡¢¼Â¹Ô¥â¥¸¥å¡¼¥ë¤ò»ÈÍÑ¤¹¤ë¤À¤±¤Ç¹½À®¤ò¹Ô¤Ê¤¦É¬Í×¤Ï¤¢¤ê¤Þ¤»¤ó¡£ÆÃ¼ì¤Ê»È¤ï¤ìÊý¤Ï¾åµ­¤Ë¤Æ¸ÀµÚ¤·¤Æ¤Þ¤¹¡£
(see Install the configuration files).
¤â¤·¡¢¤³¤Î¾ì¹ç¤Ë³ºÅö¤»¤º¡¢ `krb.conf' ¤ä `krb.realms'
¤ò»ý¤ÄÉ¬Í×¤¬¤¢¤ì¤Ð¡¢¤½¤ì¤é¤òÁª¤ó¤À¥Ç¥£¥ì¥¯¥È¥ê¤Ë¥³¥Ô¡¼¤·¤Æ¡¢ ´Ä¶­ÊÑ¿ô
KRBCONFDIR ¤ò¤½¤Î¥Ç¥£¥ì¥¯¥È¥ê ¤ò»Ø¤¹¤è¤¦¤ËÀßÄê¤·¤Þ¤¹¡£

¥¯¥é¥¤¥¢¥ó¥È¤Îµ¡Ç½¤ò¥Æ¥¹¥È¤¹¤ë¤Ë¤Ï¡¢`kinit' ¥×¥í¥°¥é¥à¤òÁö¤é¤»¤Þ¤¹¡§

     foo$ kinit
     eBones International (foo.foo.se)
     Kerberos Initialization
     Kerberos name: <nisse>
     Password: <password>

     foo$ klist
     Ticket file:    /tmp/tkt4711
     Principal:      nisse@FOO.SE

     Issued           Expires          Principal
     May 24 21:06:03  May 25 07:06:03  krbtgt.FOO.SE@FOO.SE

Install the kerberised services
===============================

¤³¤ì¤é¤Ë¤Ï¡¢`rsh', `rlogin', `telnet', `ftp',
`rxtelnet'¤Ê¤É¤¬´Þ¤Þ¤ì¤Þ¤¹¡£

¤Þ¤º¡¢Á°Àá¤Ç½Ò¤Ù¤é¤ì¤¿ÃÊ³¬¤Ë½¾¤Ã¤Æ¥¯¥é¥¤¥¢¥ó¥È¤òºî¤ê¡¢¤½¤ÎÁàºî¤Î¸¡¾Ú¤ò¹Ô¤Ê¤¤¤Þ¤¹¡£¼¡¤Ë¡¢¿·¤·¤¤¥Ç¡¼¥â¥ó¤ò»È¤¦¤¿¤á¤Ë¡¢
`inetd.conf' ¤òÊÑ¹¹¤·¤Þ¤¹¡£¥Õ¥¡¥¤¥ë`etc/inetd.conf.changes'
¤ò¸«¤Æ¡¢`inetd.conf' ¤Ë»Ü¤¹¤ª¾©¤á¤ò¸æÍ÷²¼¤µ¤¤¡£

¤³¤Î»þÅÀ¤Ç¤Ï¡¢¤É¤Î¥Þ¥·¥ó¤Ç²¿¤Î¥µ¡¼¥Ó¥¹¤òÁö¤é¤»¤ë¤«¤ò·è¤á¤Æ¤¤¤ë¤Ï¤º¤Ç¤¹¡£

rsh, rlogin, and rcp
--------------------

¤³¤³¤Ç¤Ï¡¢¥±¥ë¥Ù¥í¥¹²½¤µ¤ì¤¿¥Ð¡¼¥¸¥ç¥ó¤È "µì¼°(old style)"
¥Ð¡¼¥¸¥ç¥ó¤¬Â¸ºß¤·¤Þ¤¹¡£°Û¤Ê¤ë¥Ð¡¼¥¸¥ç¥ó¤Ï°Û¤Ê¤ë¥Ý¡¼¥ÈÈÖ¹æ¤ò»È¤¤¤Þ¤¹¤Î¤Ç¡¢²¿¤Ë¤âÌµ¤·¤«¡¢°ìÊý¤«¡¢¤¢¤ë¤¤¤Ï¡¢Î¾Êý¤òÁª¤Ù¤Þ¤¹¡£¤â¤·¡¢¶¯¤¤¤Æ
"µì¼°" ¤Î r*
¥µ¡¼¥Ó¥¹¤ò»È¤¤¤¿¤¯¤Ê¤±¤ì¤Ð¡¢¥×¥í¥°¥é¥à¤Ë¤½¤Î¥Ý¡¼¥È¤Ø¤ÎÀÜÂ³¤òÃ±¤Ëµñ¤à¤«¤ï¤ê¤Ë¡¢"Remote
host requires Kerberos authentication"
¤Î¥Æ¥­¥¹¥È¤ò½ÐÎÏ¤µ¤»¤ë¤³¤È¤¬¤Ç¤­¤Þ¤¹¡£¤³¤ì¤Ï¡¢`-v'
¥ª¥×¥·¥ç¥ó¤ÇÍ­¸ú¤È¤Ê¤ê¤Þ¤¹¡£¥±¥ë¥Ù¥í¥¹²½¤µ¤ì¤¿¥µ¡¼¥Ó¥¹¤Ë¤Ï°Å¹æ²½¤ÈÈó°Å¹æ²½¤Î¥Ð¡¼¥¸¥ç¥ó¤¬Â¸ºß¤·¤Þ¤¹¡£°Å¹æ²½¥µ¡¼¥Ó¥¹¤Ë¤Ï
"e" ¤¬Ì¾Á°¤ÎÁ°¤ËÉÕ¤­¡¢¥×¥í¥°¥é¥à¤Ï `-x'
¤ò°Å¹æ²½¤ò¼¨º¶¤¹¤ë¥ª¥×¥·¥ç¥ó¤È¤·¤Æ¼õ¤±ÉÕ¤±¤Þ¤¹¡£

¤ï¤ì¤ï¤ì¤Î¿ä¾©¤Ï¡¢¥±¥ë¥Ù¥í¥¹²½¤µ¤ì¤¿¥µ¡¼¥Ó¥¹¤Î¤ß¤ò»È¤¤¡¢¸Å¤¤¥Ý¡¼¥È¤Ë¤ÏÀâÌÀ¤Î¤¿¤á¤Î¥á¥Ã¥»¡¼¥¸¤òÍ¿¤¨¤ë¤â¤Î¤Ç¤¹¡£

telnet
------

telnet
¥µ¡¼¥Ó¥¹¤Ï¤¤¤Ä¤âÆ±¤¸¥Ý¡¼¥È¤ò»È¤Ã¤Æ¡¢¤É¤ÎÇ§¾ÚÊýË¡¤¬»È¤ï¤ì¤ë¤Ù¤­¤«¤ò¸ò¾Ä¤·¤Þ¤¹¡£`telnetd'
¥×¥í¥°¥é¥à¤¬ "-a user"¥ª¥×¥·¥ç¥ó
¤ò»ý¤Æ¤Ð¡¢¥±¥ë¥Ù¥í¥¹²½¤µ¤ì¤ÆÇ§¾Ú¤µ¤ì¤¿ÀÜÂ³¤Î¤ßµö¤·¤Þ¤¹¡£¤â¤·¡¢¤½¤ì¤ò´Þ¤Þ¤ì¤Ê¤±¤ì¤Ð¡¢ÌÀ¼¨Ê¸(clear
text)¥Ñ¥¹¥ï¡¼¥É¤Î»ÈÍÑ¤Ë¸åÌá¤ê¤Þ¤¹¡£ÌÀ¤é¤«¤ÊÍýÍ³¤Ç¡¢¤³¤Î¥ª¥×¥·¥ç¥ó¤òÍ­¸ú¤Ë¤¹¤ë¤³¤È¤ò¿ä¾©¤·¤Þ¤¹¡£¤â¤·¡¢¥ï¥ó¥¿¥¤¥à¡¦¥Ñ¥¹¥ï¡¼¥É¤ò
(see One-Time Passwords) ¤ò»È¤¤¤¿¤±¤ì¤Ð¡¢"-a otp" ¥ª¥×¥·¥ç¥ó¤Ç OTPs
¤«¥±¥ë¥Ù¥í¥¹²½¤Ë¤è¤ëÀÜÂ³¤òµö¤¹¤Ç¤·¤ç¤¦¡£

ftp
---

ftp ¥µ¡¼¥Ó¥¹¤Ï telnet
¤ÈÆ±ÍÍ¤Ë»ØÄê¤µ¤ì¤¿°ì¤Ä¤Î¥Ý¡¼¥È¤ÇÆ°¤­¤Þ¤¹¡£´ûÄê¤Ç¤Ï¡¢¥±¥ë¥Ù¥í¥¹Ç§¾Ú¤µ¤ì¤¿ÀÜÂ³¤òµö¤·¤Þ¤¹¡£°Ê²¼¤Î¥ª¥×¥·¥ç¥ó¤Ç¡¢ÉÕ²ÃÅª¤Ê¥ì¥Ù¥ë¤ò»ØÄê¤Ç¤­¤Þ¤¹¡£

`-a otp'
     ¥ï¥ó¥¿¥¤¥à¡¦¥Ñ¥¹¥ï¡¼¥É(see One-Time Passwords)¤òµö¤·¤Þ¤¹¡£

`-a ftp'
     Æ¿Ì¾¥í¥°¥¤¥ó("ftp" ¤Þ¤¿¤Ï "anonymous" ¥æ¡¼¥¶¤Ë¤Æ)¤òµö¤·¤Þ¤¹¡£

`-a safe'
     ¸åÊý¸ß´¹¤Î¤¿¤á `-a ftp' ¤ÈÆ±¤¸¤Ç¤¹¡£

`-a plain'
     ¥¯¥ê¥¢¥Æ¥­¥¹¥È¤Î¥Ñ¥¹¥ï¡¼¥É¤òµö¤·¤Þ¤¹¡£

`-a none'
     `-a ftp -a plain' ¤ÈÆ±¤¸¤Ç¤¹¡£

`-a user'
     ¤³¤ì¤é¤â¸åÊý¸ß´¹¤ÎÍýÍ³¤Ç²¿¤â¤·¤Þ¤»¤ó¡£

Æ¿Ì¾(anonymous) ftp
¤òÁö¤é¤»¤ë¤È¤­¡¢¤½¤ì¤ò¤É¤Î¤è¤¦¤ËÀßÄê¤¹¤ë¤«¤òÀâÌÀ¤¹¤ë`ftpd'
¤Ë¤Ä¤¤¤Æ¤Î¥ª¥ó¥é¥¤¥ó¡¦¥Þ¥Ë¥å¥¢¥ë¤òÆÉ¤à¤Ù¤­¤Ç¤¹¡£

pop
---

¥Ý¥¹¥È¥ª¥Õ¥£¥¹¡¦¥×¥í¥È¥³¥ë(POP)
¤Ï¥á¡¼¥ë¤ò¥á¡¼¥ë¡¦¥Ï¥Ö¤«¤é¼è¤ê¹þ¤à¤Î¤Ë»È¤ï¤ì¤Þ¤¹¡£

`popper' ¥×¥í¥°¥é¥à¤Ï¡¢É¸½à POP3 ¥×¥í¥È¥³¥ë¤È¥±¥ë¥Ù¥í¥¹²½¤µ¤ì¤¿ KPOP
¤ò¼ÂÁõ¤·¤Æ¤Þ¤¹¡£¥±¥ë¥Ù¥í¥¹ÈÇ¤Î¥×¥í¥È¥³¥ë¤ÇÁö¤é¤»¤ë¤Ë¤Ï `-k'
¤ò»È¤Ã¤Æ²¼¤µ¤¤¡£¤³¤Î¥µ¡¼¥Ó¥¹¤Ï¥á¡¼¥ë¡¦¥Ï¥Ö¤À¤±¤ÇÁö¤é¤»¤ë¤Ù¤­¤Ç¤¹¡£

kx
--

`kx' ¤Ï¥±¥ë¥Ù¥í¥¹Ç§¾Ú¤µ¤ì¤Æ¤«¤Ä°Å¹æ²½¤µ¤ì¤¿ÀÜÂ³¤Î¾å¤Ç X
¤òÁö¤é¤»¤ë¤³¤È¤òµö¤·¤Þ¤¹¡£¤³¤Î¥×¥í¥°¥é¥à¤Ï `rxtelnet'¡¢ `tenletxr'¡¢
¤ª¤è¤Ó¡¢ `rxterm' ¤Ë¤è¤ê»È¤ï¤ì¤Þ¤¹¡£

¤â¤·¡¢X ¥é¥¤¥Ö¥é¥ê¤¬ UNIX-¥½¥±¥Ã¥È
¤ò»È¤¦¤³¤È¤òµö¤µ¤ì¤Ê¤¤¤è¤¦¤ÊÌ¯¤ÊÎà¤Î¥ª¥Ú¥ì¡¼¥Æ¥£¥ó¥°¡¦¥·¥¹¥Æ¥à¤ò¤ª»ý¤Á¤Î¾ì¹ç¤Ï¡¢`-t'
¥ª¥×¥·¥ç¥ó¤ò `kxd' ¤Ë»ØÄê¤¹¤ëÉ¬Í×¤¬¤¢¤ê¤Þ¤¹¡£¤½¤ì°Ê³°¤Ï¡¢¥Ç¡¼¥â¥ó¤ò
`inetd.conf' ¤Ë²Ã¤¨¤ë¤À¤±¤Ç½½Ê¬¤Ê¤Ï¤º¤Ç¤¹¡£

kauth
-----

¤³¤Î¥µ¡¼¥Ó¥¹¤ÏÀÚÉä(ticket)¤ò¥ê¥â¡¼¥È¡¦¥Û¥¹¥È¾å¤Ëºî¤ë¤³¤È¤òµö¤·¤Þ¤¹¡£¤³¤ì¤ò²ÄÇ½¤Ë¤¹¤ë¤Ë¤Ï¡¢`inetd.conf'
¤Ë´Ø·¸¤¹¤ë¹Ô¤òÁÞÆþ¤¹¤ë¤À¤±¤Ç¤¹¡£

srvtabs
=======

Á´¤Æ¤Î¥æ¡¼¥¶¤Ï¥±¥ë¥Ù¥í¥¹¡¦¥µ¡¼¥Ð¤ÇÅÐÏ¿¤µ¤ì¤¿¥Ñ¥¹¥ï¡¼¥É¤ò»ý¤Ã¤Æ¤¤¤ëÉ¬Í×¤¬¤¢¤ê¡¢Æ±ÍÍ¤ËÁ´¤Æ¤Î¥µ¡¼¥Ó¥¹¤Ï¥±¥ë¥Ù¥í¥¹¡¦¥µ¡¼¥Ð¤È¤Î¶¦Í­¸°¤ò»ý¤ÄÉ¬Í×¤¬¤¢¤ê¤Þ¤¹¡£¤½¤Î¥µ¡¼¥Ó¥¹¸°¤Ï¡¢ÄÌ¾ï¤Ï
`/etc/srvtab'
¤È¸Æ¤Ð¤ì¤ë¥Õ¥¡¥¤¥ë¤ËÊÝÂ¸¤µ¤ì¤Þ¤¹¡£¤³¤Î¥Õ¥¡¥¤¥ë¤Ï¸°¤¬Ë½¤«¤ì¤ë¤ÎÈò¤±¤ë¤¿¤á¤Ë
root
°Ê³°¤ÎÃ¯¤Ë¤âÆÉ¤Þ¤ì¤Ê¤¤¤è¤¦¤Ë¤¹¤Ù¤­¤Ç¤¹¡£¥±¥ë¥Ù¥í¥¹¡¦¥Ç¡¼¥¿¥Ù¡¼¥¹¤ÎÃæ¤Î¤³¤Î¥×¥ê¥ó¥·¥Ñ¥ë¤ÎÌ¾Á°¤ÏÄÌ¾ï¤Ï¥µ¡¼¥Ó¥¹Ì¾¤È¥Û¥¹¥ÈÌ¾¤Ç¤¹¡£
¤³¤Î¤è¤¦¤Ê¥×¥ê¥ó¥·¥Ñ¥ë¤ÎÎã¤Ï¡¢`pop.HOSTNAME' ¤È `rcmd.HOSTNAME'
¤Ç¤¹¡£(rcmd ¤Ï "remote command" ¤ËÍ³Íè¤·¤Þ¤¹¡£) ¤â¤Ã¤È¤â¤è¤¯»È¤ï¤ì¤ë
srvtab ¤Î´ö¤Ä¤«¤Î·¿¤È¡¢¤½¤ì¤é¤ò»È¤¦¥×¥í¥°¥é¥à¤ò¤³¤³¤ËÎóµó¤·¤Þ¤¹¡£

rcmd.HOSTNAME
     rsh, rcp, rlogin, telnet, kauth, su, kx

rcmd.kerberos
     kprop

pop.HOSTNAME
     popper, movemail, push

sample.HOSTNAME
     sample_server, simple_server

changepw.kerberos
     kadmin, kpasswd

krbtgt.REALM
     kerberos (not stored in any srvtab)

ftp.HOSTNAME
     ftp (also tries with rcmd.HOSTNAME)

zephyr.zephyr
     Zephyr

afs or afs.CELLNAME
     Andrew File System

¤³¤ì¤é¤Î¸°¤òºî¤ë¤¿¤á¤Ë¤Ï¡¢`ksrvutil' ¥×¥í¥°¥é¥à¤ò»È¤¦¤Ç¤·¤ç¤¦¡£
¤³¤ì¤ò¹Ô¤Ê¤¦¤Ë¤Ï°Ê²¼¤Î¤è¤¦¤Ë¤·¤Þ¤¹¡§

     bar# ksrvutil -p nisse.admin get
     Name [rcmd]: <>
     Instance [bar]: <>
     Realm [FOO.SE]: <>
     Is this correct? (y,n) [y] <>
     Add more keys? (y,n) [n] <>
     Password for nisse.admin@FOO.SE: <nisse.admin's password>
     Written rcmd.bar
     rcmd.bar@FOO.SE
     Old keyfile in /etc/srvtab.old.

Complete test of the kerberised services
----------------------------------------

¤¢¤ë¥Þ¥·¥ó (`foo') ¾å¤ÇÀÚÉä¤òÆþ¼ê¤·¤Æ¡¢¥±¥ë¥Ù¥í¥¹²½¥µ¡¼¥Ó¥¹¤Ç¼¡¤Î¥Þ¥·¥ó
(`bar')
¤Ë¥í¥°¥¤¥ó¤¹¤ë¤¿¤á¤Ë»È¤¤¤Þ¤¹¡£¤â¤·¤¦¤Þ¤¯¹Ô¤±¤Ð¡¢¤½¤Î¥Æ¥¹¥È¤Ï°Ê²¼¤Î¤è¤¦¤Ë¸«¤¨¤Þ¤¹:

     foo$ kinit nisse
     eBones International (foo.foo.se)
     Kerberos Initialization for "nisse"
     Password: <nisse's password>
     foo$ klist
     Ticket file:    /tmp/tkt4711
     Principal:      nisse@FOO.SE

     Issued           Expires          Principal
     May 30 13:48:03  May 30 23:48:03  krbtgt.FOO.SE@FOO.SE
     foo$ telnet bar
     Trying 17.17.17.17...
     Connected to bar.foo.se
     Escape character is '^]'.
     [ Trying mutual KERBEROS4 ... ]
     [ Kerberos V4 accepts you ]
     [ Kerberos V4 challenge successful ]
     bar$

Á´¤Æ¤¬¤¦¤Þ¤¯Æ°¤¤¤Æ¤¤¤ë¤³¤È¤ò³Î¤«¤á¤ë¤Î¤Ë¡¢`rsh', `rcp', `rlogin',
`rlogin -x' ¤ä¤½¤ÎÂ¾¤Î¥³¥Þ¥ó¥É¤Ç»î¤·¤Æ¤ß¤ë¤³¤È¤â¤Ç¤­¤Þ¤¹¡£

Install a slave kerberos server
===============================

¥Þ¥¹¥¿¡¦¥µ¡¼¥Ð¤¬Íî¤Á¤¿¾ì¹ç¤Î¤³¤È¤ò¹Í¤¨¤Æ¡¢¾¯¤Ê¤¯¤È¤â£±¤Ä°Ê¾å¤Î¥Ð¥Ã¥¯¥¢¥Ã¥×(¥¹¥ì¡¼¥Ö)¡¦¥µ¡¼¥Ð¤ò»ý¤Ä¤³¤È¤ÏË¾¤Þ¤·¤¤¤³¤È¤Ç¤¹¡£¤³¤Î¤è¤¦¤Ê¥¹¥ì¡¼¥Ö¡¦¥µ¡¼¥Ð¤ò¹¥¤­¤Ê¿ô¤À¤±»ý¤Ä¤³¤È¤Ï²ÄÇ½¤Ç¤¹¤¬¡¢ÄÌ¾ï¤ÏÍ¾·×¤Ê½ÅÊ£¤ò¤µ¤»¤ë¤¿¤á¤Ë»°¤Ä°Ê¾å¤â»ý¤Ä¤³¤È¤Ï¤¢¤ê¤Þ¤»¤ó¡£

ºÇ½é¤ËÎÉ¤¤¥µ¡¼¥Ð¡¦¥Þ¥·¥ó¤òÁªÄê¤·¤Þ¤¹¡£See Choose a kerberos server¡£
¥Þ¥¹¥¿¡¼¤Ç `rcmd.kerberos' (Ãíµ­¡¢Ê¸»úÄÌ¤ê "kerberos"
¤È¤¹¤Ù¤­¤Ç¤¹)¥×¥ê¥ó¥·¥Ñ¥ë¤ò (`ksrvutil get' ¤ò»È¤Ã¤Æ) ²Ã¤¨¤Þ¤¹¡£
¥Þ¥¹¥¿¡¼¾å¤ÇÁö¤ë `kprop' ¥×¥í¥°¥é¥à¤Ï¡¢¥¹¥ì¡¼¥Ö¡¦¥µ¡¼¥Ð¾å¤ÇÁö¤Ã¤Æ¤¤¤ë
`kpropd' ¥Ç¡¼¥â¥ó¤ËÇ§¾Ú¤òµá¤á¤ë¤È¤­¤Ë¤³¤ì¤ò»È¤¤¤Þ¤¹¡£¥¹¥ì¡¼¥Ö¾å¤Î
`kpropd' ¤Ï¥Þ¥¹¥¿¡¼¤«¤é¤ÎÇ§¾ÚÀÜÂ³¤Î¤¿¤á¤Ë `rcmd.hostname'
¸°¤ò»È¤¦¤Ç¤·¤ç¤¦¡£¤½¤ì¤æ¤¨¡¢¥¹¥ì¡¼¥Ö¤Ï srvtab
¤Ë¤³¤ì¤Î¤¿¤á¤Î¸°¤ò»ý¤ÄÉ¬Í×¤¬¤¢¤ê¡¢¤½¤·¤Æ¡¢¤â¤Á¤í¤ó¡¢¥µ¡¼¥Ð¡¼¤È¤·¤Æ³èÆ°¤¹¤ë¤¿¤á¤Ë½½Ê¬¤Î¹½À®¥Õ¥¡¥¤¥ë¤ò»ý¤ÄÉ¬Í×¤â¤¢¤ê¤Þ¤¹¡£¤³¤ì¤ò¤É¤Î¤è¤¦¤Ë¹Ô¤Ê¤¦¤«¤Ï
Install the kerberised services ¤ò»²¾È¤·¤Æ²¼¤µ¤¤¡£

Áí³ç¤¹¤ë¤È¡¢¥Þ¥¹¥¿¡¼¤Ï `rcmd.kerberos'
¤Î¤¿¤á¤Î¸°¤ò»ý¤Á¡¢¤½¤·¤Æ¡¢¥¹¥ì¡¼¥Ö¤Ï`rcmd.hostname' ¤Î¸°¤ò»ý¤Ä¤Ï¤º¤Ç¤¹¡£

¥¹¥ì¡¼¥Ö¤Ï¥Þ¥¹¥¿¡¼¤Ë»È¤Ã¤¿¤â¤Î¤ÈÆ±¤¸¿Æ¸°¤òÉ¬Í×¤È¤¹¤ë¤Ç¤·¤ç¤¦¡£

¥Þ¥¹¥¿¡¦¥µ¡¼¥Ð¤Ç¤Ï¡¢¥±¥ë¥Ù¥í¥¹¡¦¥¹¥ì¡¼¥Ö¡¦¥µ¡¼¥Ð¤Î¥Û¥¹¥ÈÌ¾¤ò´Þ¤à¥Õ¥¡¥¤¥ë¡¢Îã¤¨¤Ð
`/var/kerberos/slaves'¡¢¤òºî¤ê¤Þ¤¹¡£

`kpropd' ¤ò¥¹¥ì¡¼¥Ö¡¦¥µ¡¼¥Ð¾å¤Ç¡¢ `kpropd -i' ¤Ç¡¢³«»Ï¤·¤Þ¤¹¡£

¥Þ¥¹¥¿¡¦¥µ¡¼¥Ð¾å¤Ç¤Ï¡¢¥Ç¡¼¥¿¥Ù¡¼¥¹¤Î¥À¥ó¥×¤òºî¤Ã¤Æ¡¢¤½¤ì¤òÅÁÇÅ¤·¤Þ¤¹¡£

     foo# kdb_util slave_dump /var/kerberos/slave_dump
     foo# kprop

¤³¤ì¤Ç¡¢¥Ç¡¼¥¿¥Ù¡¼¥¹¤Î¥³¥Ô¡¼¤ò¥¹¥ì¡¼¥Ö¡¦¥µ¡¼¥Ð¾å¤Ë»ý¤Ä¤Ï¤º¤Ç¤¹¡£¤³¤Î¤³¤È¤Ï¡¢¥¹¥ì¡¼¥Ö¥µ¡¼¥Ð¾å¤Ç
`kdb_util dump FILE'
¤òÈ¯¹Ô¤·¤Æ¡¢¸µ¤Î¥Þ¥¹¥¿¡¦¥µ¡¼¥Ð¾å¤Î¥Õ¥¡¥¤¥ë¤ÈÈæ³Ó¤¹¤ë¤³¤È¤Ë¤è¤Ã¤Æ¾ÚÌÀ¤¹¤ë¤³¤È¤¬¤Ç¤­¤Þ¤¹¡£µ­ºÜ¤¬Æ±¤¸½çÈÖ¤Ë¤Ï¤Ê¤¤¤³¤È¤ËÃí°Õ¤·¤Æ²¼¤µ¤¤¡£

°ìÎã¤È¤·¤Æ¡¢¤³¤Î¼êÂ³¤­¤ò°ì»þ´ÖËè¤Ë¥¯¥í¡¼¥ó¤Ë¤è¤êÁö¤é¤µ¤ì¤ëÀµµ¬¤Î¥¹¥¯¥ê¥×¥È¤Ë¤è¤ê¼«Æ°²½¤¹¤ë¤Ù¤­¤Ç¤¹¡£

¥Þ¥¹¥¿¡¼¤È¥¹¥ì¡¼¥Ö¤ÏÆ±¤¸¥Ç¡¼¥¿¥Ù¡¼¥¹¤ÎÊ£À½¤ò»È¤¦¤Î¤Ç¡¢Î¾¼Ô¤ÏÆ±¤¸¿Æ¸°¤ò¤ò»È¤¦É¬Í×¤¬¤¢¤ê¤Þ¤¹¡£`kstash'
¤Ç¡¢¿Æ¸°¤ò¥¹¥ì¡¼¥Ö¤Ë²Ã¤¨¤Þ¤¹¡£(see Set up the server)

¥±¥ë¥Ù¥í¥¹¡¦¥µ¡¼¥Ð¤ò¥¹¥ì¡¼¥Ö¤Ç³«»Ï¤¹¤ë¤Ë¤Ï¡¢¤Þ¤ººÇ½é¤Ë¥Þ¥¹¥¿¸°¤ò¥Þ¥¹¥¿¡¦¥µ¡¼¥Ð¤è¤ê¥³¥Ô¡¼¤·¤Ê¤±¤ì¤Ð¤Ê¤ê¤Þ¤»¤ó¡£¤³¤Î¤¿¤á¤Ë¤Ï¡¢¥Þ¥¹¥¿¡¦¥Ñ¥¹¥ï¡¼¥É¤ò³Ð¤¨¤Æ¤ª¤¤¤Æ¡¢`kstash'
¥³¥Þ¥ó¥É¤òÈ¯¹Ô¤¹¤ë¤«¡¢¤¢¤ë¤¤¤Ï¡¢Ã±¤Ë¸°¥Õ¥¡¥¤¥ë¤ò¥Þ¥¹¥¿¡¦¥µ¡¼¥Ð¤«¤é¥³¥Ô¡¼¤¹¤ë¤³¤È¤Ë¤è¤ê²ÄÇ½¤Ç¤¹¡£¤â¤·¡¢¥Õ¥¡¥¤¥ë¤ò¥³¥Ô¡¼¤¹¤ë¾ì¹ç¤Ï¡¢°ÂÁ´¤ÊÇÞÂÎ¤Ç¡¢¥Í¥Ã¥È¥ï¡¼¥¯¤òÄÌ¤µ¤Ê¤¤¤Ç¥³¥Ô¡¼¤¹¤ë¤³¤È¤òËº¤ì¤Ê¤¤¤Ç²¼¤µ¤¤¡£ÎÉ¤¤ÊýË¡¤Ï¥Õ¥í¥Ã¥Ô¡¼¤«»æ¤ËÆþ¤ì¤ë¤³¤È¤Ç¤¹¡£»ÏËö¤·°×¤¤¤Î¤Ç»æ¤ÎÊý¤¬ÎÉ¤¤¤Ç¤·¤ç¤¦¡£

¥¹¥ì¡¼¥Ö¡¦¥µ¡¼¥Ð¾å¤Ç¤Ï¡¢¥±¥ë¥Ù¥í¥¹¡¦¥µ¡¼¥Ð¤Ï `-s'
¥ª¥×¥·¥ç¥ó¤Ç³«»Ï¤µ¤ì¤ë¤Ù¤­¤Ç¤¹¡£¤³¤ì¤Ï¡¢¤¿¤È¤¨¤ÐºÇ¸å¤Î¥Þ¥¹¥¿¡¦¥µ¡¼¥Ð¤«¤é¤Î¥¢¥Ã¥×¥Ç¡¼¥È¤«¤é¤Î»þ´Ö¤Ê¤É¡¢Àµ¾ïÀ­¤Î³ÎÇ§¤ò²ÄÇ½¤Ë¤·¤Þ¤¹¡£

¥Ç¡¼¥¿¥Ù¡¼¥¹¤Ø¤ÎÊÑ¹¹¤ÏÁ´¤Æ¥Þ¥¹¥¿¾å¤Î `kadmind'
¤Ë¤è¤ê¹Ô¤Ê¤ï¤ì¡¢¥¹¥ì¡¼¥Ö¤ËÅÁ¤¨¤é¤ì¤Þ¤¹¤Î¤Ç¡¢¥¹¥ì¡¼¥Ö¾å¤Ç¤Ï `kadmind'
¤òÁö¤é¤»¤ëÉ¬Í×¤Ï *¤¢¤ê¤Þ¤»¤ó*¡£

ºÇ¸å¤Ë¥¹¥ì¡¼¥Ö¡¦¥µ¡¼¥Ð¤Ë `/etc/krb.conf'
¤ò²Ã¤¨¤Þ¤¹¡£¥¯¥é¥¤¥¢¥ó¥È¤Ï¤½¤Î¥Õ¥¡¥¤¥ë¤Ë»ØÄê¤µ¤ì¤¿½çÈÖ¤Ç¥µ¡¼¥Ð¤ËÌä¤¤¹ç¤ï¤»¤ë¤³¤È¤Ë¤Ê¤ê¤Þ¤¹¡£

See Install the configuration files ¤ò¸æÍ÷¤Ë¤Ê¤Ã¤Æ¡¢CNAME
¤ò¥¹¥ì¡¼¥Ö¥µ¡¼¥Ð¤ËÄÉ²Ã¤¹¤ë¤³¤È¤ò¸¡Æ¤¤·¤Æ²¼¤µ¤¤¡£

Cross-realm functionality
=========================

¼«Ê¬¤Î¥ì¥ë¥à `MY.REALM' ¤Ë¤¤¤ë¤È²¾Äê¤·¤Æ¡¢¤É¤Î¤è¤¦¤Ë¤·¤ÆÂ¾¤Î¥ì¥ë¥à
`OTHER.REALM' ¤Ë¤¢¤ë¥µ¡¼¥Ð¤ËÇ§¾Ú¤òµá¤á¤Þ¤¹¤«¡© `MY.REALM'
¤Ç¤ÎÀµÅö¤ÊÀÚÉä¤ò»ý¤Ä¤³¤È¤Ë¤è¤ê¡¢¤½¤Î¥ì¥ë¥à¤Ë¤Æ¥±¥ë¥Ù¥í¥¹²½¤µ¤ì¤¿¥µ¡¼¥Ó¥¹¤ÈÄÌ¿®¤¹¤ë¤³¤È¤òµö¤·¤Þ¤¹¡£¤·¤«¤·¤Ê¤¬¤é¡¢Â¾¤Î¥ì¥ë¥à¤Î¥³¥ó¥Ô¥å¡¼¥¿¤Ï¤¢¤Ê¤¿¤Î¥ì¥ë¥à¤Î¥±¥ë¥Ù¥í¥¹¡¦¥µ¡¼¥Ð¤ÈÈëÌ©¸°¤ò¶¦Í­¤·¤Þ¤»¤ó¡£

Æó¤Ä¤Î¥ì¥ë¥à¤Î´Ö¤Ç¤ª¸ß¤¤¤Ë¿®ÍÑ¤·¤¢¤¨¤ë¶¦Í­¸°¤ò²Ã¤¨¤ë¤³¤È¤¬²ÄÇ½¤Ç¤¹¡£`telnet'
¤Î¤è¤¦¤Ê¥¯¥é¥¤¥¢¥ó¥È¡¦¥×¥í¥°¥é¥à¤¬Áê¼ê¤Î¥³¥ó¥Ô¥å¡¼¥¿¤¬°Û¤Ê¤ë¥ì¥ë¥à¤Ë¤¢¤ë¤³¤È¤ò¸«¤Ä¤±¤ë¤È¡¢¥í¡¼¥«¥ë¡¦¥±¥ë¥Ù¥í¥¹¡¦¥µ¡¼¥Ð¤«¤é¡¢Â¾¤Î¥ì¥ë¥à¤Ø¤ÎÈ¯·ôµö²Ä¾Ú(TGT)¤òÆÀ¤è¤¦¤È»î¤ß¤ë¤Ç¤·¤ç¤¦¡£¤½¤·¤Æ¡¢È¯·ôµö²Ä¾Ú¤µ¤¨¤¢¤ì¤Ð¡¢Â¾¤Î¥ì¥ë¥à¤Î¥±¥ë¥Ù¥í¥¹¡¦¥µ¡¼¥Ð¤«¤é¥µ¡¼¥Ó¥¹·ô¤ò¼èÆÀ¤Ç¤­¤ë¤Ç¤·¤ç¤¦¡£

¤³¤Îµ¡Ç½¤òÍ¿¤¨¤ë¤¿¤á¤Ë¤Ï¡¢¤½¤ì¤¾¤ì¤Î¥ì¥ë¥à¤Î¥×¥ê¥ó¥·¥Ñ¥ë¤òÁê¸ß¤Ë²Ã¤¨¤Ê¤±¤ì¤Ð¤Ê¤ê¤Þ¤»¤ó¡£¥×¥ê¥ó¥·¥Ñ¥ë¤Ï¡¢`MY.REALM'
¤Ç¤Ï `krbtgt.OTHER.REALM' ¤Ç¡¢¤½¤·¤Æ¡¢`OTHER.REALM' ¤Ç¤Ï
`krbtgt.MY.REALM'
¤Î¤Ï¤º¤Ç¤¹¡£¤½¤Î°Û¤Ê¤ë£²¤Ä¤Î¥×¥ê¥ó¥·¥Ñ¥ë¤ÏÆ±¤¸¡Ê¤½¤·¤ÆÆ±¤¸¸°¥Ð¡¼¥¸¥ç¥óÈÖ¹æ¤Î¡Ë¸°¤ò»ý¤Ä¤Ù¤­¤Ç¤¹¡£¤³¤Î¸°¤ò°ÂÁ´¤ËÅ¾Á÷¤¹¤ë¤³¤È¤òËº¤ì¤Ê¤¤¤Ç²¼¤µ¤¤¡£¤³¤ì¤¬Í×µá¤µ¤ì¤ë¤³¤È¤Î¤¹¤Ù¤Æ¤Ç¤¹¡£

     blubb$ klist
     Ticket file:    /tmp/tkt3008
     Principal:      joda@NADA.KTH.SE

       Issued           Expires          Principal
     Jun  7 02:26:23  Jun  7 12:26:23  krbtgt.NADA.KTH.SE@NADA.KTH.SE
     blubb$ telnet agat.e.kth.se
     Trying 130.237.48.12...
     Connected to agat.e.kth.se.
     Escape character is '^]'.
     [ Trying mutual KERBEROS4 ... ]
     [ Kerberos V4 accepts you ]
     [ Kerberos V4 challenge successful ]
     Last login: Sun Jun  2 20:51:50 from emma.pdc.kth.se

     agat$ exit
     Connection closed by foreign host.
     blubb$ klist
     Ticket file:    /tmp/tkt3008
     Principal:      joda@NADA.KTH.SE

       Issued           Expires          Principal
     Jun  7 02:26:23  Jun  7 12:26:23  krbtgt.NADA.KTH.SE@NADA.KTH.SE
     Jun  7 02:26:50  Jun  7 12:26:50  krbtgt.E.KTH.SE@NADA.KTH.SE
     Jun  7 02:26:51  Jun  7 12:26:51  rcmd.agat@E.KTH.SE

One-Time Passwords
******************

¤³¤Î¥Ñ¥Ã¥±¡¼¥¸¤Ë¤Ï "¥ï¥ó¥¿¥¤¥à¡¦¥Ñ¥¹¥ï¡¼¥É" (OTP)
¤ò»È¤¦¤¿¤á¤Î¥µ¥Ý¡¼¥È¤â¤¢¤ê¤Þ¤¹¡£ÆÃ¤Ë¡¢`login', `ftpd' ¤½¤ì¤È `popper'
¤Ç¤Î¥µ¥Ý¡¼¥È¤¬¤¢¤ê¤Þ¤¹¡£

What are one time passwords?
============================

¥ï¥ó¥¿¥¤¥à¡¦¥Ñ¥¹¥ï¡¼¥É(OTP)¤Ï¡¢¤½¤ÎÌ¾Á°¤Î¤È¤ª¤ê¡¢°ì²ó¤À¤±»È¤¨¤ë¥Ñ¥¹¥ï¡¼¥É¤Ç¤¹(»È¤¤¼Î¤Æ¥Ñ¥¹¥ï¡¼¥É¤È¤â¸À¤¤¤Þ¤¹)¡£¤³¤ì¤Ï¡¢Ã¯¤«¤¬¥Í¥Ã¥È¥ï¡¼¥¯¤òÅðÄ°¤·¤ÆÅð¤ó¤À¥Ñ¥¹¥ï¡¼¥É¤ò»È¤ª¤¦¤È¤·¤Æ¤â»È¤¨¤Ê¤¤¤³¤È¤ò°ÕÌ£¤·¤Þ¤¹¡£

¤³¤Î¥Ñ¥Ã¥±¡¼¥¸¤Î OTP ¤Ï `RFC 1938'
¤ò¥µ¥Ý¡¼¥È¤·¤Þ¤¹¡£¤³¤ÎÉ¸½à¤Ï¤è¤¯ÃÎ¤é¤ì¤Æ¤¤¤ë S/Key
¤È¸åÊý¸ß´¹¤Ç¤â¤¢¤ê¤Þ¤¹¡£¤³¤ì¤òÀ¸À®¤¹¤ë¥×¥í¥°¥é¥à¤Ï¡¢HP 48
¤Î¤â¤Î¤«¤é¥¯¥ì¥¤¤Î¤â¤Î¤Þ¤ÇÁ´¤Æ¤Î¥Þ¥·¥ó¤Ë¤ï¤¿¤ê¤¿¤¯¤µ¤ó¤¢¤ê¤Þ¤¹¡£

When to use one time passwords?
===============================

¤Ê¤¼¡¢¥±¥ë¥Ù¥í¥¹¤ÎÂå¤ï¤ê¤Ë OTP ¤ò»È¤¤¤¿¤¬¤ë¤Î¤Ç¤·¤ç¤¦¤«¡© OTP¤ÎÍøÅÀ¤Ï
¥³¥ó¥Ô¥å¡¼¥¿¤ÎÁàºî¤¬É¬Í×Ìµ¤¤¤³¤È¤Ç¤¹¡£¥Ñ¥¹¥ï¡¼¥É¤Î¥ê¥¹¥È¤ò¥×¥ê¥ó¥È¥¢¥¦¥È¤·¤Æ»ý¤Ã¤Æ¹Ô¤¯¤³¤È¤¬¤Ç¤­¤Þ¤¹¤·¡¢·×»»µ¡¤«·ÈÂÓ·¿¥³¥ó¥Ô¥å¡¼¥¿¤ò»È¤Ã¤ÆÀ¸À®¤¹¤ë¤³¤È¤â¤Ç¤­¤Þ¤¹¡£

Î¢¤òÊÖ¤»¤Ð¡¢OTP
¤ÏÆ©²á·¿¹¶·â¤ËÂÐ¤·¤Æ¤Î¤ß¤¢¤Ê¤¿¤ò¼é¤ê¤Þ¤¹¡£ºÇ½é¤ÎÀÜÂ³¤Ç¤Î¤ßÇ§¾Ú¤¬¹Ô¤Ê¤ï¤ì¤Þ¤¹¡£¤½¤ì°Ê¸å¤Ï¡¢Ã¯¤Ç¤â¤¢¤Ê¤¿¤Î¥»¥Ã¥·¥ç¥ó¤òÅðÄ°¤Ç¤­¤Þ¤¹¤Î¤Ç¡¢OTP
¤Ç¤ÎÀÜÂ³¤òÄÌ¤·¤Æ(¥Ñ¥¹¥ï¡¼¥É¤Î¤è¤¦¤Ê)½ÅÍ×¤Ê¥Ç¡¼¥¿¤ÏÁ÷¤Ã¤¿¤ê¸«¤¿¤ê¤¹¤ë¤Ù¤­¤Ç¤Ï¤¢¤ê¤Þ¤»¤ó¡£¤Þ¤¿¡¢¿¯Æþ¼Ô¤¬¡¢¤¢¤Ê¤¿¤Î
TCP
¥»¥Ã¥·¥ç¥ó¤«¤Ä¤Þ¤¿¤Ï¾Ò²ð¥Ç¡¼¥¿¤ò¡¢ÅÓÃæ¤Ç²£¼è¤ê¤¹¤ë¤è¤¦¤Ê¹¶·â¤Ë¤Ä¤¤¤Æ¤ÏÌµËÉÈ÷¤Ç¤¹¡£¸À¤¤ÂØ¤¨¤ë¤È¡¢OTP
¤Ç¤Ï¡¢ºÇ½é¤ÎÇ§¾Ú¤Î¤ß¤òÄó¶¡¤·¤Þ¤¹¤¬¡¢¥Ç¡¼¥¿¤ÎÊÝÁ´À­¤âÆâÌ©À­¤â¤¢¤ê¤Þ¤»¤ó¡£

OTP ¤Ï¥¿¥×¥ë(SEED, SEQUENCE NUMBER, PASS-PHRASE)
¤«¤é¥¸¥§¥Í¥ì¡¼¥È¤µ¤ì¤Þ¤¹¡£¼ï(seed)¤ÈÄÌÈÖ(sequence number)
¤ÏÄ©Àï¾õ("challenge")
¤Î°ìÉô¤È¤·¤ÆÉ½¼¨¤µ¤ì¤Þ¤¹¤Î¤Ç¡¢¤½¤ì¤ËÂÐ±þ¤·¤¿¥Ñ¥¹¥ï¡¼¥É¤òÀ¸À®¤¹¤ë¤«¡¢Í½¤áÀ¸À®¤·¤Æ¤ª¤¤¤¿¥ê¥¹¥È¤è¤ê¼è¤ê½Ð¤·¤Þ¤¹¡£

ºÇ¸å¤Ë¡¢OTP
¤Ï´ÊÃ±¤Ç¤É¤³¤Ç¤â»È¤¨¤Þ¤¹¤¬¡¢¥±¥ë¥Ù¥í¥¹¤¬¤¹¤ë¤è¤¦¤Ë¡¢Á´¤Æ¤Î¶¼°Ò¤ËÂÐ¤·¤ÆÊÝ¸î¤µ¤ì¤ë¤ï¤±¤Ç¤Ï¤¢¤ê¤Þ¤»¤ó¡£¥±¥ë¥Ù¥í¥¹¤¬»È¤¨¤Ê¤¤»þ¤Ë»È¤Ã¤Æ¤¯¤À¤µ¤¤¡£

Configuring OTPs
================

Initializing
============

OTP ¤ò½é´ü²½¤¹¤ë¤Ë¤Ï `otp'
¥×¥í¥°¥é¥à¤ò»È¤¤¤Þ¤¹¡£¤³¤Î¥×¥í¥°¥é¥à¤Ï¤³¤Î¥Û¥¹¥È¾å¤Ç¸½ºß¤Î¥Ñ¥¹¥ï¡¼¥É(¤³¤³¤Ç¤Ï100ÈÖÌÜ)¤È¤½¤ì¤Ë´Ø·¸¤¹¤ë¼ï(`foobar')¤ò¼ê¸µ¤Î¥Õ¥¡¥¤¥ë¤Ëµ­ºÜ¤·¤Þ¤¹¡£

     datan:>otp 100 foobar
     Pass-phrase: <pass-phrase>
     Verifying password Pass-phrase: <pass-phrase>

Generating
==========

¤½¤ì¤é¤Î¥ê¥¹¥È¤ò½ÐÎÏ¤¹¤ë¤Ë¤Ï `otpprint' ¤È¸Æ¤Ð¤ì¤ë¥×¥í¥°¥é¥à¤¬¤¢¤ê¤Þ¤¹¡£

     datan:>otpprint 100 foobar
     Pass-phrase: <pass-phrase>
     91: SLAM BUY SUP DUSK SKY BEST
     92: DEEM SIGH ROB RASH JUG MAT
     93: DUET FISK HERS AREA TOLL SUP
     94: WOW RAIN LEAK SARA MARK WING
     95: COG YELL MILK CART ABE BAWL
     96: GROW SILK GIST OMEN CAM ANNE
     97: JAG QUAD NUT BEAT BHOY MAGI
     98: ADAM USED GENE NIP EYE SIS
     99: MY SUNG HERO AT DASH RAKE
     100: CORN KNIT BOTH TOGO SOUL BOG

Using the OTPs
==============

¼«Ê¬ÍÑ¤Ë½é´ü²½¤µ¤ì¤¿°ìÏ¢¤Î¥ï¥ó-¥¿¥¤¥à¡¦¥Ñ¥¹¥ï¡¼¥É¤Î°ì¤Ä¤ò»È¤ª¤¦¤È¤¹¤ë»þ¤Ï¡¢»ÈÍÑ¤µ¤ì¤ë¥¢¥ë¥´¥ê¥º¥à¤ÈÄÌÈÖ¤È¤½¤·¤Æ¼ï¤òÄ©Àï¾õ¤È¤È¤â¤Ë¼õ¤±¼è¤ê¤Þ¤¹¡£¤³¤ì¤é¤òÀ¸À®´ï¤ËÆþÎÏ¤¹¤ë¤«¡¢¥ê¥¹¥È¤«¤éÂÐ±þ¤¹¤ë¥Ñ¥¹¥ï¡¼¥É¤ò¸«¤Ä¤±¤Æ²¼¤µ¤¤¡£

     login: assar
     assar's [ otp-md5 99 foobar ] Password: <MY SUNG HERO AT DASH RAKE>

¥Ñ¥¹¥ï¡¼¥É¤ÎÄÌÈÖ¤Ï `otp'
¤ËÍ¿¤¨¤¿ÈÖ¹æ¤è¤ê£±¤À¤±¾¯¤Ê¤¤¿ô¤«¤é»Ï¤Þ¤ê¡¢¤½¤ì¤ò»È¤¦Ëè¤Ë£±¤Å¤Ä¸º¤Ã¤Æ¹Ô¤­¤Þ¤¹¡£Ã¯¤â¤¢¤Ê¤¿¤Î¥Ñ¥¹¥ï¡¼¥É¤òÅð¤ó¤Ç»È¤Ã¤Æ¤¤¤Ê¤¤¤³¤È¤ò³Î¤«¤á¤ë¤¿¤á¤Ë¤Ï¡¢¸½ºß¤ÎÄÌÈÖ¤¬²¿ÈÖ¤«¤ò¤¤¤Ä¤â¸«¤Æ¤¤¤ë¤Ù¤­¤Ç¤¹¡£ÈÖ¹æ¤¬£°¤ËÃ£¤·¤¿¤é¡¢¿·¤·¤¤¥Ñ¥¹¥ï¡¼¥É¤Î¥»¥Ã¥È¤òÆþ¼ê¤¹¤ëÉ¬Í×¤¬¤¢¤ê¤Þ¤¹¡£

°ìÅÙ¥Ñ¥¹¥ï¡¼¥É¤ÎÄÖ¤ò½é´ü²½¤·¤Æ¤·¤Þ¤Ã¤¿¤é¡¢¾åµ­¤Î¤è¤¦¤ÊÄ©Àï¾õ¤ò¼õ¤±¼è¤Ã¤¿¤È¤³¤í¤Ç¡¢¤É¤Î¤è¤¦¤Ê¥Ñ¥¹¥ï¡¼¥É¡¦¥×¥í¥ó¥×¥È¤ËÂÐ¤·¤Æ¤Ç¤â»È¤¦¤³¤È¤¬¤Ç¤­¤Þ¤¹¡£

Configuring servers
===================

`ftpd', `telnetd', ¤ª¤è¤Ó `popper'
¤Ï¡¢¥±¥ë¥Ù¥í¥¹Ç§¾Ú¤Ç¤Ê¤¤ÀÜÂ³¤Î»þ¤Ë¡¢¥ï¥ó-¥¿¥¤¥à¡¦¥Ñ¥¹¥ï¡¼¥É¤òÍ×µá¤¹¤ë¤è¤¦¤ËÀßÄê¤¹¤ë¤³¤È¤¬¤Ç¤­¤Þ¤¹¡£¥ª¥ó¥é¥¤¥ó¡¦¥Þ¥Ë¥å¥¢¥ë¤Ç¡¢¤³¤ì¤é¤Î¥×¥í¥°¥é¥à¤Î¸½ºß¤Î¥ª¥×¥·¥ç¥ó¤ò³ÎÇ§¤·¤Æ²¼¤µ¤¤¡£

Resolving frequent problems
***************************

Problems compiling Kerberos
===========================

Â¿¤¯¤Î¥³¥ó¥Ñ¥¤¥é¤Ï ANSI ½àµò¤Ë¤¹¤ë¤¿¤á¤Ë¥¹¥¤¥Ã¥Á¤òÍ×¤·¤Þ¤¹¡£kth4 ¤Ï
ANSI C ¤Ç½ñ¤«¤ì¤Æ¤¤¤Þ¤¹¤Î¤Ç¡¢»È¤ï¤ì¤ë¥³¥ó¥Ñ¥¤¥é¤ÎÌ¾Á°¤È ANSI
½àµò¤Ë¤¹¤ë¤¿¤á¤ËÍ×µá¤µ¤ì¤ë¥¹¥¤¥Ã¥Á¤ò»ØÄê¤¹¤ëÉ¬Í×¤¬¤¢¤ê¤Þ¤¹¡£¤³¤ì¤Ï¡¢`env'
¥³¥Þ¥ó¥É¤ò»È¤Ã¤Æ configure¤òÁö¤é¤»¤ë¤ÈºÇ¤â´ÊÃ±¤Ë¤Ç¤­¤Þ¤¹¡£¶ñÂÎÅª¤Ë
HP-UX ¤Î²¼¤ÇÉíÂ°¤Î¥³¥ó¥Ñ¥¤¥é¤ò»È¤Ã¤Æ¹½ÃÛ¤¹¤ë¤Ë¤Ï¼¡¤Î¤è¤¦¤Ë¹Ô¤Ê¤¤¤Þ¤¹¡£

     datan$ env CC="cc -Ae" ./configure

°ìÈÌÅª¤Ë¤Ï `gcc'
¤¬»È¤¨¤Þ¤¹¡£¼¡¤ÎÁÈ¹ç¤»¤Ç¤âÇÛÉÛ¥Ñ¥Ã¥±¡¼¥¸¤ò¤¦¤Þ¤¯¥³¥ó¥Ñ¥¤¥ë¤Ç¤­¤¿¤³¤È¤¬¾ÚÌÀ¤µ¤ì¤Æ¤¤¤Þ¤¹¡£

`HP-UX'
     `cc -Ae'

`Digital UNIX'
     `cc -std1'

`AIX'
     `xlc'

`Solaris 2.x'
     `cc' (unbundled one)

`IRIX'
     `cc'

Linux ¤ÎÌäÂê
------------

RedHat4.2 ¤Î²¼¤Ç libc ´Ø¿ô¤Î gethostby*()
¤Ï»þ¡¹¥³¥¢¥À¥ó¥×¤·¤Þ¤¹¡£¤â¤·¤³¤ì¤é¤ÎÌäÂê¤Ë¤Ö¤Ä¤«¤Ã¤¿¤é¡¢¥Õ¥¡¥¤¥ë
`/etc/nsswitch.conf'
¤Î¥Û¥¹¥È¤Îµ­ºÜ¤¬°Ê²¼¤Ë¼¨¤¹¹Ô¤è¤ê¤âÊ£»¨¤Ë¤Ê¤Ã¤Æ¤¤¤Ê¤¤¤«¤ò³ÎÇ§¤·¤Æ²¼¤µ¤¤¡£

hosts: files dns

¤¢¤ë¥·¥¹¥Æ¥à¤Ï krb4 ¤òÀµ¤·¤¯¹½ÃÛ¤¹¤ë¤Î¤ËÉ¬Í×¤Ê `/usr/include/ndbm.h'
¤¬Ìµ¤¯¤Ê¤Ã¤Æ¤¤¤Þ¤¹¡£`ndbm.h.Linux'
¤ò¥½¡¼¥¹ÇÛÉÛ¥Ñ¥Ã¥±¡¼¥¸¤ÎÎÙ¤ËÃÖ¤¤¤Æ¤¢¤ê¤Þ¤¹¡£

¤¢¤ë Linux ¥Ñ¥Ã¥±¡¼¥¸¤Ç¤ÏÆ°¤«¤Ê¤¤ `libdb'
¤ÎÊó¹ð¤¬¤¢¤ê¤Þ¤¹¡£¤â¤·¤½¤ì¤¬µ¯¤³¤Ã¤¿¤é¡¢configure ¤òÁö¤é¤»¤ë¤È¤­¤Ë
`--without-berkeley-db' ¤ò»È¤Ã¤Æ²¼¤µ¤¤¡£

SunOS 5 (aka Solaris 2) problems
--------------------------------

¶¦Í­¥é¥¤¥Ö¥é¥ê¤ò¹½ÃÛ¤¹¤ëºÝ¤Ë GNU gcc/ld ¤ÎÁÈ¹ç¤»¤ò»È¤¦¤È¤­¤Ï¡¢RUN_PATH
´Ä¶­ÊÑ¿ô¤ò  /usr/athena/lib (ÂÐ¾Ý libdir)
¤ËÀßÄê¤¹¤ëÊý¤¬ÎÉ¤¤¤Ç¤·¤ç¤¦¡£¤½¤¦¤·¤Ê¤¤¤È¡¢LD_LIBRARY_PATH ¤ò
¼Â¹Ô»þ¤ËÀßÄê¤·¤Ê¤¤¸Â¤ê¡¢PAM ¥â¥¸¥å¡¼¥ë¤ÏÆ°¤­¤Þ¤»¤ó¡£

HP-UX ¤ÎÌäÂê
------------

¶¦Í­¥é¥¤¥Ö¥é¥ê¤Î `/usr/lib/libndbm.sl'
¤¬¤¹¤Ù¤Æ¤Î¥·¥¹¥Æ¥à¤ËÂ¸ºß¤¹¤ë¤ï¤±¤Ç¤Ï¤¢¤ê¤Þ¤»¤ó¡£¤³¤ÎÌäÂê¤Ë¤È¤Ã¤Æ¹¹¤Ë°­¤¤¤³¤È¤Ï¡¢ÀÅÅª·ë¹ç¤Î¤¿¤á¤Î¥¢¡¼¥«¥¤¥ÖÈÇ¤âÌµ¤¤¤³¤È¤Ç¤¹¡£¤½¤ì¤æ¤¨¡¢¥Ð¥¤¥Ê¥ê¤ò¹½ÃÛ¤¹¤ë¤È¤­¤Ï¡¢"ËÜÅö¤Ë°Ü¿¢À­¤Î¤¢¤ë"
GNU gdbm ¤Þ¤¿¤Ï Berkeley DB
¤òºÇ½é¤Ë¥¤¥ó¥¹¥È¡¼¥ë¤·¤ª¤¤¤Æ¡¢¤½¤Î¥é¥¤¥Ö¥é¥ê¤ËÂÐ¤·¤Æ·ë¹ç¤ò¹Ô¤Ê¤¨¤ë¤³¤È¤ò³ÎÇ§¤·¤Æ¤«¤é¤Ë¤·¤Þ¤¹¡£

Cray ¤ÎÌäÂê
-----------

Cray ¾å¤Ç `rlogind' ¤Ï `forkpty()'
¤¬°Ü¿¢¤µ¤ì¤ë¤Þ¤Ç¤ÏÆ°¤­¤Þ¤»¤ó¡£¤½¤ì¤Þ¤Ç¤Ï¡¢`telnetd' ¤ò»È¤Ã¤Æ²¼¤µ¤¤¡£

IRIX problems
-------------

IRIX¤Ë¤Ï£³¼ïÎà¤Î°Û¤Ê¤ë ABI:(Application Binary Interface)
¤¬¤¢¤ê¡¢¤½¤ì¤¾¤ì¡¢¸Å¤¤ 32 ¥Ó¥Ã¥È¤Î¥¤¥ó¥¿¡¼¥Õ¥§¡¼¥¹(
O32¡¢¤¢¤ë¤¤¤Ï¡¢¤¿¤À¤Î 32 ¤È¤·¤ÆÃÎ¤é¤ì¤ë)¤È¡¢¿·¤·¤¤ 32
¥Ó¥Ã¥È¤Î¥¤¥ó¥¿¡¼¥Õ¥§¡¼¥¹(N32)¡¢¤ª¤è¤Ó¡¢64 ¥Ó¥Ã¥È¤Î¥¤¥ó¥¿¡¼¥Õ¥§¡¼¥¹(64)
¤Ç¤¹¡£ O32 ¤È N32 ¤Ï¡¢¤É¤Á¤é¤â 32
¥Ó¥Ã¥È¤Ç¤¹¤¬¡¢¤½¤ì¤¾¤ì°Û¤Ê¤ë¸Æ½Ðµ¬Äê¤È¤Ê¤Ã¤Æ¤ª¤ê¡¢ÊÂ¤Ó¤ÎÀ©Ìó¤Ë¤Ä¤¤¤Æ¤âÆ±ÍÍ¤Ç¤¹¡£IRIX
6.4 ¤«¤é¤Ï¡¢N32 ¥Õ¥©¡¼¥Þ¥Ã¥È¤¬´ûÄê¤È¤Ê¤Ã¤Æ¤¤¤Þ¤¹¡£
ABI¤Ï¥³¥ó¥Ñ¥¤¥ë»þ¤ËÁªÂò¤·¤Þ¤¹¤¬¡¢`--with-mips-abi' ¹½À®¥ª¥×¥·¥ç¥ó¤Ç
»ØÄê¤Ç¤­¤Þ¤¹¡£¤³¤Î¥ª¥×¥·¥ç¥ó¤ËÍ¿¤¨¤ë¤³¤È¤Î¤Ç¤­¤ë°ú¿ô¤Ï¡¢`o32',
`n32',¤¢¤ë¤¤¤Ï, `64' ¤Ç¡¢N32 ¤¬´ûÄê¤Ç¤¹¡£3¼ïÎà¤Î°Û¤Ê¤ë ABI:s
¤Î¤¿¤á¤Î¥é¥¤¥Ö¥é¥ê¤Ï¡¢ÄÌ¾ï¡¢¤½¤ì¤¾¤ì°Û¤Ê¤ë¥Ç¥£¥ì¥¯¥È¥ê(`lib', `lib32',
¤¢¤ë¤¤¤Ï `lib64')¤Ë¥¤¥ó¥¹¥È¡¼¥ë¤µ¤ì¤Þ¤¹¡£

GCC ¤Ï¡¢°Û¤Ê¤ë ABI ¤Ç¤Ï¡¢´ûÃÎ¤ÎÌäÂê¤òÊú¤¨¤Æ¤¤¤Þ¤¹¡£¸Å¤¤ GCC ¤Ç¤Ï O32
¤À¤±¤ò°·¤¨¤Þ¤¹¤¬¡¢¿·¤·¤¤ GCC ¤Ç¤Ï N32 ¤È 64 ¤ò°·¤¨¤Æ O32
¤Ï°·¤¨¤º¡¢¤¢¤ëÈÇ¤Î GCC ¤Ë¤ª¤¤¤Æ¤Ï¡¢N32 ¤Î¹½Â¤ÂÎÊÂ¤Ó¤¬²õ¤ì¤Æ¤¤¤Þ¤¹¡£

¤³¤Î°Û¤Ê¤ë ABI
¤Ë¤è¤ëº®Íð¤Î¤¿¤á¡¢¤¢¤ëÌäÂê¤¬°ú¤­µ¯¤³¤µ¤ì¤Þ¤¹¡£Îã¤¨¤Ð¡¢`afskauthlib.so'
¥é¥¤¥Ö¥é¥ê¤Ï `xdm' ¤ä `login' ¤ÈÆ±¤¸ ABI
¤ò»È¤¦É¬Í×¤¬¤¢¤ê¤Þ¤¹¡£ºÇ¤â´ÊÃ±¤ÊÊýË¡¤Ï¡¢ `/usr/bin/X11/xdm' ¤ÇÁö¤ë
`file' ¤¬¤É¤Î ABI ¤ò»È¤¦¤Î¤«¤ò³ÎÇ§¤¹¤ë¤³¤È¤Ç¤¹¡£

¤â¤¦°ì¤Ä¤ÎÌäÂê¤Ï¡¢Transarc ¤Î AFS ¤òÁö¤é¤»¤è¤¦¤È¤¹¤ë¾ì¹ç¤Ç¡¢64-bit ABI
¤ò¥µ¥Ý¡¼¥È¤·¤Ê¤¤¤¿¤á¡¢64
¥Ó¥Ã¥È¤Î¥¢¥×¥ê¥±¡¼¥·¥ç¥ó¤«¤é¤Î¥È¡¼¥¯¥ó¤òÆþ¼ê¤¹¤ë¤³¤È¤¬¤Ç¤­¤Þ¤»¤ó¡£¤â¤·¡¢¤É¤¦¤·¤Æ¤â¤·¤Ê¤¯¤Æ¤Ï¤Ê¤é¤Ê¤¤¤Î¤Ç¤·¤¿¤é¡¢¤³¤Îµ¡Ç½¤òÄó¶¡¤¹¤ë¤¿¤á¤Î¥«¡¼¥Í¥ë¡¦¥â¥¸¥å¡¼¥ë¤¬
<ftp://ftp.pdc.kth.se/home/joda/irix-afs64.tar.gz> ¤Ë¤¢¤ê¤Þ¤¹¡£

AIX ¤ÎÌäÂê
----------

`gcc' version 2.7.2.* ¤Ë¤Ï¡¢ºÇÅ¬²½¤ò¤·²á¤®¤ë¤È
`appl/telnet/telnetd/sys_term.c'
¤ò´Ö°ã¤¨¤Æ¥³¥ó¥Ñ¥¤¥ë¤¹¤ë¥Ð¥°¤¬¤¢¤ê¤Þ¤¹(¤â¤·¤«¤·¤¿¤é
`appl/bsd/forkpty.c' ¤â)¡£

`xlc'
¥×¥ê¥×¥í¥»¥Ã¥µ¤Î´ö¤Ä¤«¤ÎÈÇ¤Ç¤Ï¡¢(Ê¸½ñ¤Ë½ñ¤«¤ì¤Æ¤¤¤Ê¤¤)`-qnolm'¥ª¥×¥·¥ç¥ó¤òÇ§¼±¤·¤Þ¤»¤ó¡£¤â¤·¡¢¤³¤Î¥ª¥×¥·¥ç¥ó¤¬¤½¤Î¥×¥ê¥×¥í¥»¥Ã¥µ¤Ë(`/etc/ibmcxx.cfg'
¹½À®¥Õ¥¡¥¤¥ë¤ò·ÐÍ³¤·¤¿¤ê¤·¤Æ)ÅÏ¤µ¤ì¤ì¤Ð¡¢¹½À®(configure)¤Ï¼ºÇÔ¤¹¤ë¤Ç¤·¤ç¤¦¡£

¤³¤Î²ò·è¤Ë¤Ï¹½À®¥Õ¥¡¥¤¥ë¤«¤é¤½¤Î¥ª¥×¥·¥ç¥ó¤òÁ´ÂÎÅª¤Ë¡¢¤¢¤ë¤¤¤Ï¡¢¥×¥ê¥×¥í¥»¥Ã¥µ
¤Ë¤Ä¤¤¤Æ¤Î¤ß¼è¤ê½ü¤¯¤³¤È¤Ç¤¹¡§

     $ cp /etc/ibmcxx.cfg /tmp
     $ed /tmp/ibmcxx.cfg
     8328
     /nolm
             options   = -D_AIX,-D_AIX32,-D_AIX41,-D_AIX43,-D_IBMR2,-D_POWER,-bpT:0x10000000,-bpD:0x20000000,-qnolm
     s/,-qnolm//p
             options   = -D_AIX,-D_AIX32,-D_AIX41,-D_AIX43,-D_IBMR2,-D_POWER,-bpT:0x10000000,-bpD:0x20000000
     w
     8321
     q
     $ env CC=xlc CPP="xlc -E -F/tmp/ibmcxx.cfg" configure

AFS 3.4 version 5.38 for AIX 4.3
¤Ë¤Ï¥Ð¥°¤¬¤¢¤ê¡¢´ö¤Ä¤«¤Î¾ì¹ç¤Ë¥«¡¼¥Í¥ë¤ò¥Ñ¥Ë¥Ã¥¯¤Ë´Ù¤ì¤Þ¤¹¡£`login'
¤Ë¤Ï¤³¤ì¤ËÂÐ¤¹¤ëÂÐ½è¤â¤¢¤ê¤Þ¤¹¤¬¡¢¤³¤ÎÌäÂê¤ÏÂ¾¤Î¥×¥í¥°¥é¥à¤Ë¤âµÚ¤Ö¤«¤âÃÎ¤ì¤Þ¤»¤ó¡£¤³¤ÎÌäÂê¤Ï¡¢version
5.55 ¤ÇÄ¾¤Ã¤¿¤è¤¦¤Ç¤¹¡£

C2 ¤ÎÌäÂê
---------

¥Ñ¥¹¥ï¡¼¥É¤ò³ÎÇ§¤¹¤ë¥×¥í¥°¥é¥à¤Ï `passwd', OTP
¤ª¤è¤Ó¥±¥ë¥Ù¥í¥¹¡¦¥Ñ¥¹¥ï¡¼¥É ¤ÇÆ°¤­¤Þ¤¹¡£¤â¤·¡¢C2
¥»¥­¥å¥ê¥Æ¥£(¤â¤·¤¯¤Ï¤½¤ÎÂ¾¤Î¥Ñ¥¹¥ï¡¼¥É¡¦¥Ç¡¼¥¿¥Ù¡¼¥¹)¤ò»È¤¦¤Ê¤é¤Ð¡¢ÄÌ¾ï¥Ñ¥¹¥ï¡¼¥É¤Ï¤É¤³¤«¤ï¤«¤é¤Ê¤¤½ê¤ËÊÝ»ý¤·¤Þ¤¹¡£¤â¤·¡¢¥±¥ë¥Ù¥í¥¹¤ò
C2
¥»¥­¥å¥ê¥Æ¥£¤Ç»È¤¤¤¿¤¤¤Ê¤é¤Ð¡¢¤É¤Î¤è¤¦¤ÊÊÑ¹¹¤¬É¬Í×¤«¤ò¹Í¤¨¤Ê¤±¤ì¤Ð¤Ê¤é¤Ê¤¤¤Ç¤·¤ç¤¦¡£See
Digital SIA ¤ò¸«¤Æ¡¢Digital ¤Î SIA ¤È C2
¥»¥­¥å¥ê¥Æ¥£¤Ë¤Ä¤¤¤Æ¤ÎµÄÏÀ¤â¸«¤Æ²¼¤µ¤¤¡£

Problems with firewalls
=======================

¥Õ¥¡¥¤¥¢¥¦¥©¡¼¥ë¤Ï¥Õ¥¡¥¤¥¢¥¦¥©¡¼¥ë¤Î¤¢¤ëÂ¦¤«¤éÍè¤ë¤¢¤ë·¿¤Î¥Ñ¥±¥Ã¥È¤¬È¿ÂÐÂ¦¤ËÍè¤ë¤Î¤òÊ¬ÊÌ¤·¤ÆÄù¤á½Ð¤·¤Þ¤¹¡£¥Õ¥¡¥¤¥¢¥¦¥©¡¼¥ë¤Ï¤¢¤ë¼ï¤ÎÌäÂê¤ò¥±¥ë¤Ù¥í¥¹¤Î¤è¤¦¤Ë²ò·è¤¹¤ë¤È²¾Äê¤µ¤ì¤Þ¤¹¡Ê´ðËÜÅª¤Ë¤ÏÇ§²Ä¤µ¤ì¤Ê¤¤¥Í¥Ã¥È¥ï¡¼¥¯¤Î»ÈÍÑ¤òÁË¤ß¤Þ¤¹¡Ë¡£°ã¤¤¤Ï¡¢¥±¥ë¤Ù¥í¥¹¤¬ÍøÍÑ¼Ô¤òÇ§¾Ú¤·¤è¤¦¤È¤¹¤ë¤Î¤ËÂÐ¤·¡¢¥Õ¥¡¥¤¥¢¥¦¥©¡¼¥ë¤Ï¥Í¥Ã¥È¥ï¡¼¥¯¤ò
`°ÂÁ´' ¤ÊÆâÂ¦¤È `°ÂÁ´¤Ç¤Ê¤¤' ³°Â¦¤È¤ËÊ¬¤±¤ë¤³¤È¤Ç¤¹¡£

¥Õ¥¡¥¤¥¢¥¦¥©¡¼¥ë¤ò»È¤¦¿Í¡¹¤Ï¡¢UDP ¤¬ÉôÊ¬Åª¤Ë `°ÂÁ´¤Ç¤Ê¤¤'
¥×¥í¥È¥³¥ë¤ò»È¤Ã¤Æ¤¤¤ë¤È¤¤¤¦ÍýÍ³¤«¤é¡¢ UDP
¤Ï°ÂÁ´¤Ç¤Ê¤¤¤È¹Í¤¨¤Þ¤¹¡£¥±¥ë¤Ù¥í¥¹¤Ï´ûÄê¤Ç¤Ï UDP
¤ò»È¤Ã¤Æ¥Ñ¥±¥Ã¥È¤òÁ÷¤Ã¤¿¤ê¼õ¤±¼è¤Ã¤¿¤ê¤¹¤ë¤Î¤Ç¡¢¥±¥ë¤Ù¥í¥¹¤È¥Õ¥¡¥¤¥¢¥¦¥©¡¼¥ë¤È¤¬°ì½ï¤Ç¤Ï¤¢¤Þ¤ê¤¦¤Þ¤¯Æ°¤­¤Þ¤»¤ó¡£

¥Õ¥¡¥¤¥¢¥¦¥©¡¼¥ë¤Î¸å¤íÂ¦¤«¤é¥±¥ë¥Ù¥í¥¹¤ò»î¤½¤¦¤È¤·¤Æ¤¤¤ëÃû¸õ¤Ï¡¢ÀÚÉä¤òÁ´¤¯Æþ¼ê¤Ç¤­¤Þ¤»¤ó(`kinit'
¤¬°­Ì¾¹â¤¤ `Can't send request' ¥¨¥é¡¼¥á¥Ã¥»¡¼¥¸¤Ç½ªÎ»¤·¤Þ¤¹)¡£

¤³¤ì¤é¤ÎÌäÂê¤ò²ò·è¤¹¤ë¤Ë¤Ï´ö¤Ä¤«¤ÎÊýË¡¤¬¤¢¤ê¤Þ¤¹¡§

   * ¥Õ¥¡¥¤¥¢¥¦¥©¡¼¥ë¤Î´ÉÍý¼Ô¤òÀâ¤­Éú¤»¤Æ¡¢Æþ¤Ã¤Æ¤¯¤ë¥Ñ¥±¥Ã¥È¤Î¤¿¤á¤Ë
     UDP ¥Ý¡¼¥È¤Î 750 ¤« 88
     ¤ò³«¤±¤Æ¤â¤é¤¦¤³¤È¤Ç¤¹¡£ÂçÄñ¤³¤ì¤Ï¤ä¤ä¤³¤·¤¯¤Ê¤ê¤Þ¤¹¡£

   * ¥Õ¥¡¥¤¥¢¥¦¥©¡¼¥ë¤Î´ÉÍý¼Ô¤òÀâ¤­Éú¤»¤Æ¡¢½Ð¤Æ¤æ¤¯¥Ñ¥±¥Ã¥È¤Î¤¿¤á¤Ë UDP
     ¥Ý¡¼¥È¤Î 750 ¤« 88
     ¤ò³«¤±¤Æ¤â¤é¤¦¤³¤È¤Ç¤¹¡£¤³¤ì¤Ï¤â¤Ã¤È´ÊÃ±¤Ë¤Ç¤­¤ë¤Ç¤·¤ç¤¦¡£¤â¤·¤«¤¹¤ë¤È¤â¤¦²ÄÇ½¤Ë¤Ê¤Ã¤Æ¤¤¤ë¤«¤â¤·¤ì¤Þ¤»¤ó¡£

   * ¤¢¤ëÉ¸½à¤Ç¤Ê¤¤¥Ý¡¼¥È¤ò±Û¤¨¤ë TCP
     ÀÜÂ³¤ò»È¤¤¤Þ¤·¤ç¤¦¡£¤³¤ì¤Ë¤Ï¡¢¥±¥ë¤Ù¥í¥¹¡¦¥µ¡¼¥Ð¤Î´ÉÍý¼Ô¤òÀâ¤­Éú¤»¤Æ¤³¤Î¥Ý¡¼¥È¤Ç¤ÎÀÜÂ³¤ò²ÄÇ½¤Ë¤·¤Æ¤â¤é¤¤¤Þ¤¹¡£

   *
     HTTP¤ò»È¤Ã¤ÆÀÚÉä¤òÆÀ¤Þ¤¹¡£¥¦¥§¥Ö¤Ë¤è¤ë¤â¤Î¤¬¤Û¤È¤ó¤ÉÌµ¿ô¤Ë¿Íµ¤¤¬¤¢¤ë¤Î¤Ç¡¢Â¿¤¯¤Î¥Õ¥¡¥¤¥¢¥¦¥©¡¼¥ë¤¬
     HTTP ¥Ý¡¼¥È¤ò³«¤¤¤Æ¤¤¤ë¤«¡¢¤¢¤ë¤¤¤Ï HTTP ¥×¥í¥¯¥·¤ò»ý¤Ã¤Æ¤¤¤Þ¤¹¡£

ºÇ¸å¤Î£²¤Ä¤ÎÊýË¡¤Ï¹¶·âÅª¤È¹Í¤¨¤é¤ì¤ë¤Ç¤·¤ç¤¦¡Ê`Àµ¤·¤¤'
·¿¤Î¥Ç¡¼¥¿¤ò¤½¤ì¤¾¤ì¤Î¥Ý¡¼¥È¤ËÁ÷¤ë¤Î¤Ç¤Ï¤Ê¤¤¤Î¤Ç¡Ë¡£¤ª¤½¤é¤¯ºÇÁ±¤ò¿Ô¤¯¤·¤Æ¥Õ¥¡¥¤¥¢¥¦¥©¡¼¥ë¤Î´ÉÍý¼Ô¤ÈµÄÏÀ¤¹¤ë¤³¤È¤Ë¤Ê¤ë¤Ç¤·¤ç¤¦¡£

KDC
¤ÈÄÌ¿®¤¹¤ë¤È¤­¤ËÂ¾¤Î¥×¥í¥È¥³¥ë¤ò¤É¤Î¤è¤¦¤Ë»È¤¦¤«¤Ë¤Ä¤¤¤Æ¤Î¾ðÊó¤Ë¤Ä¤¤¤Æ¤Ï¡¢See
Install the configuration files ¤ò¸«¤Æ²¼¤µ¤¤

¥Õ¥¡¥¤¥¢¥¦¥©¡¼¥ë¤Ï `ÆâÂ¦'
¤Î¥¢¥É¥ì¥¹¤ò±£¤¹¤³¤È¤¬¤è¤¯¤¢¤ê¤Þ¤¹¤Î¤Ç¡¢Á´¤Æ¤Î¥Ñ¥±¥Ã¥È¤¬¥Õ¥¡¥¤¥¢¥¦¥©¡¼¥ë¤«¤éÍè¤Æ¤¤¤ë¤è¤¦¤Ë¸«¤¨¤Þ¤¹¡£¥¯¥é¥¤¥¢¥ó¥È¤Î¥Û¥¹¥È¤Î¥¢¥É¥ì¥¹¤¬ÀÚÉä¤ÎÃæ¤Ë¥³¡¼¥É²½¤µ¤ì¤Æ¤Þ¤¹¤Î¤Ç¡¢¤³¤ì¤¬¥È¥é¥Ö¥ë¤òµ¯¤³¤·¤Þ¤¹¡£¤â¤·¡¢ÀÚÉä¤ò»È¤ª¤¦¤È¤¹¤ì¤Ð
`Incorrect network address'
¤Î¤è¤¦¤Ê¥¨¥é¡¼¥á¥Ã¥»¡¼¥¸¤ò¼õ¤±¤È¤ê¤Þ¤¹¡£¤³¤ÎÌäÂê¤Îµ¯¤­¤ëÍýÍ³¤Ï¡¢ÏÃ¤«¤±¤è¤¦¤È¤·¤Æ¤¤¤ë¥µ¡¼¥Ð¤¬
KDC
¤«¤éÁ÷¤é¤ì¤¿¤Î¤È°Û¤Ê¤ë¥¢¥É¥ì¥¹¤ò¸«¤ë¤¿¤á¤Ç¤¹¡£¤â¤·¡¢¤³¤Î¼ï¤Î¥È¥é¥Ö¥ë¤¬µ¯¤­¤¿¤È¤­¤Î²ò·è¤Ø¤ÎºÇ¤â¶áÆ»¤Ï¡¢¤ª¤½¤é¤¯ÀÚÉä¤òÆÀ¤ë¤Î¤ËÂ¾¤Îµ¡¹½¤ò¤¿¤á¤¹¤³¤È¤Ç¤·¤ç¤¦¡£´ÉÍý¼Ô¤òÀâ¤­Éú¤»¤ë¤³¤È¤¬¤Ç¤­¤ì¤Ð¡¢¥µ¡¼¥Ð¤Ë°Û¤Ê¤ë£²¤Ä¤Î¥¢¥É¥ì¥¹¤ò
`/etc/krb.equiv' ¥Õ¥¡¥¤¥ë¤Ë²Ã¤¨¤Æ¤â¤é¤¦¤Ù¤­¤Ç¤¹¡£

Common error messages
=====================

¤â¤Ã¤ÈÉÔÌÀÎÆ¤Ê¥¨¥é¡¼¥á¥Ã¥»¡¼¥¸¤Ë´ö¤Ä¤«½Ð²ñ¤¦¤«¤âÃÎ¤ì¤Þ¤»¤ó¡§

`Time is out of bounds'
     ¤¢¤Ê¤¿¤Î¥Þ¥·¥ó¤Î»þ´Ö¤¬¡¢¥±¥ë¥Ù¥í¥¹¡¦¥µ¡¼¥Ð¤«¡¢¤¢¤ë¤¤¤Ï¡¢¥í¥°¥¤¥ó¤·¤è¤¦¤È¤·¤Æ¤¤¤ë¥Þ¥·¥ó¤«¤Î¤É¤Á¤é¤«¤Î»þ´Ö¤È°Û¤Ê¤ê¤Þ¤¹¡£¤â¤·¡¢¤³¤Î¤³¤È¤¬ÌÀ³Î¤Ç¤Ê¤±¤ì¤Ð¡¢Á´¤Æ¤Î»þ´Ö¤Ï
     UTC ¤ÇÈæ³Ó¤µ¤ì¤ë¤³¤È¤ò»×¤¤½Ð¤·¤Æ²¼¤µ¤¤¡£

     UNIX ¥·¥¹¥Æ¥à¾å¤Ç¤ÏÉáÄÌ¤Ï `telnet machine daytime'
     ¤ò¹Ô¤Ê¤¦¤³¤È¤Ë¤è¤ê¶É½ê»þ´Ö¤òÄ´¤Ù¤ë¤³¤È¤¬¤Ç¤­¤Þ¤¹¡£¤³¤Î»þ´Ö(ºÆ¤Ó¡¢ÉáÄÌ¤Ï¥­¡¼¥ï¡¼¥É)¤Ï¥¿¥¤¥à¥¾¡¼¥ó(time-zone)¤È²Æ»þ´Ö(daylight
     savings)¤ÎÊäÀµ¤ò¹Ô¤Ê¤Ã¤Æ¤¤¤Þ¤¹¡£¤â¤·¡¢¤¢¤Ê¤¿¤Î»þ¹ï¤òÆ±´ü¤µ¤»Â³¤±¤ë¤³¤È¤¬Æñ¤·¤±¤ì¤Ð¡¢NTP(
     see Install the client programs
     ¤Ç¤ÎµÄÏÀ¤â»²¾È²¼¤µ¤¤)¤Î¤è¤¦¤Ê»þ¹ï¹ç¤ï¤»¥·¥¹¥Æ¥à¤ÎÍøÍÑ¤ò¹Í¤¨¤Æ²¼¤µ¤¤¡£

`Ticket issue date too far in the future'
     ¥±¥ë¥Ù¥í¥¹¡¦¥µ¡¼¥Ð¤Î»þ´Ö¤¬¥¢¥×¥ê¥±¡¼¥·¥ç¥ó¡¦¥µ¡¼¥Ð¤Î»þ´Ö¤è¤ê5Ê¬°Ê¾å¿Ê¤ó¤Ç¤¤¤Þ¤¹¡£

`Can't decode authenticator'
     ¤³¤ì¤Ï¡¢¥±¥ë¥Ù¥í¥¹¡¦¥µ¡¼¥Ð¤Î¥µ¡¼¥Ó¥¹¸°¤¬ÆÃÄê¥Þ¥·¥ó¾å¤Î¥µ¡¼¥Ó¥¹¸°¥Õ¥¡¥¤¥ë¤È¹ç¤Ã¤Æ¤¤¤Ê¤¤¤³¤È¤ò°ÕÌ£¤·¤Þ¤¹¡£
     ¤¢¤ë¤¤¤Ï:
        * ¥µ¡¼¥Ð¤¬Í×ÀÁ¤Ë¹çÃ×¤¹¤ë¥µ¡¼¥Ó¥¹¸°¤ò¸«¤Ä¤±¤é¤ì¤Ê¤¤

        *
          ¥µ¡¼¥Ó¥¹¸°(¤¢¤ë¤¤¤Ï¥Ð¡¼¥¸¥ç¥óÈÖ¹æ)¤¬¥Ñ¥±¥Ã¥È¤ò°Å¹æ²½¤·¤¿¸°¤Ë¥Þ¥Ã¥Á¤·¤Ê¤¤

`Incorrect network address'
     ÀÚÉä¤ÎÃæ¤Î¥¢¥É¥ì¥¹¤¬¥ê¥¯¥¨¥¹¥È¤òÁ÷¤Ã¤¿¥¢¥É¥ì¥¹¤È°ìÃ×¤·¤Þ¤»¤ó¡£¤³¤ì¤Ï¡¢ÊªÍýÅª¤¢¤ë¤¤¤ÏÏÀÍýÅª¤ËÆó¤Ä°Ê¾å¤Î¥Í¥Ã¥È¥ï¡¼¥¯¥¢¥É¥ì¥¹¤ò»ý¤Ä¥·¥¹¥Æ¥à¤Çµ¯¤³¤ê¤Þ¤¹¡£¥µ¡¼¥Ð¤Î`/etc/krb.equiv'
     ¤ËÆ±Åù¤È¹Í¤¨¤é¤ì¤ë¤Ù¤­¥¢¥É¥ì¥¹¤òºÜ¤»¤ë¤³¤È¤¬¤Ç¤­¤Þ¤¹¡£

     ¥×¥í¥°¥é¥Þ¤Ø¤ÎÃí°Õ: ¤¢¤ë¥µ¡¼¥Ð¤Ï `*' ¤ò `krb_rd_req'
     ¤Ø¤Î¥¤¥ó¥¹¥¿¥ó¥¹¤È¤·¤ÆÅÏ¤¹¤Ù¤­¤Ç¤Ï¤¢¤ê¤Þ¤»¤ó¡£`k_getsockinst'
     ¤Ë¤è¤ë¥¤¥ó¥¹¥¿¥ó¥¹¤Ë¤Ä¤¤¤Æ¤Ï¡¢¤É¤Î¥¤¥ó¥¿¡¼¥Õ¥§¡¼¥¹¤Ç¥ê¥¯¥¨¥¹¥È¤¬¼õ¤±¼è¤é¤ì¤¿¤«¤ò¤Ï¤Ã¤­¤ê¤µ¤»¤ë¤è¤¦¤Ë»î¤ß¤ë¤Ù¤­¤Ç¤¹¡£

     ¤â¤·¡¢¥³¥ó¥Ô¥å¡¼¥¿¤Î¥¢¥É¥ì¥¹¤òÊÑ¤¨¤ë¤È¡¢»ý¤Ã¤Æ¤¤¤ëÀÚÉä¤Ï¼º¸ú¤µ¤»¤é¤ì¤Þ¤¹¡£ºÇ¤â´ÊÃ±¤Ë¤³¤ì¤òÄ¾¤¹ÊýË¡¤Ï¡¢¿·¤·¤¤¥¢¥É¥ì¥¹¤Ç¿·¤·¤¤ÀÚÉä¤òÆÀ¤ë¤³¤È¤Ç¤¹¡£

`Message integrity error'
     ¼¡¤Î¤è¤¦¤Ë¥Ñ¥±¥Ã¥È¤¬²õ¤ì¤Æ¤¤¤Þ¤¹:
        * Ä¹¤µ¤¬¥Ñ¥±¥Ã¥È¤Î¥µ¥¤¥º¤Ë¹ç¤Ã¤Æ¤¤¤Ê¤¤¤«¡¢ ¤¢¤ë¤¤¤Ï¡¢

        * ¥Á¥§¥Ã¥¯¥µ¥à¤¬¥Ñ¥±¥Ã¥È¤ÎÃæ¿È¤È¹ç¤Ã¤Æ¤¤¤Þ¤»¤ó¡£

`Can't send request'
     ¥±¥ë¥Ù¥í¥¹¡¦¥µ¡¼¥Ð¤ÈÀÜ¿¨¤¹¤ë¾å¤Ç´ö¤Ä¤«¤ÎÌäÂê¤¬¤¢¤ê¤Þ¤¹¡£¥µ¡¼¥Ð¤¬¥À¥¦¥ó¤·¤Æ¤¤¤ë¤«¡¢¤¢¤ë¤¤¤Ï¡¢´Ö°ã¤Ã¤¿¥Ý¡¼¥È¤ò»È¤Ã¤Æ¤¤¤Þ¤¹(`/etc/services'
     ¤Î `kerberos-iv'
     ¤Îµ­ºÜ¤ÈÈæ¤Ù¤Æ¤ß¤Æ¤¯¤À¤µ¤¤)¡£¥¯¥é¥¤¥¢¥ó¥È¤¬ÏÃ¤«¤±¤ë¤Ù¤­¥±¥ë¥Ù¥í¥¹¡¦¥µ¡¼¥Ð¤ò´ª°ã¤¤¤·¤Æ¤¤¤ë¤«¤â¤·¤ì¤Þ¤»¤ó(`/etc/krb.conf'
     ¤È `/etc/krb.realms'¤ò³ÎÇ§¤·¤Æ²¼¤µ¤¤)¡£

     ¥±¥ë¥Ù¥í¥¹¡¦¥µ¡¼¥Ð¤ÈÀÜ¿¨¤Ç¤­¤Ê¤¤ÊÌ¤ÎÍýÍ³¤Ï¡¢¥±¥ë¥Ù¥í¥¹¤Î¥Ñ¥±¥Ã¥È¤òÄÌ¤¹¤³¤È¤òµö¤µ¤Ê¤¤¥Õ¥¡¥¤¥¢¥¦¥©¡¼¥ë¤Î¸å¤í¤Ë¤¤¤ë¤«¤é¤Ç¤·¤ç¤¦¡£¤³¤ì¤ò²ÄÇ½¤Ë¤¹¤ë²ò·èÊýË¡¤Ï¾åµ­¤Î¥Õ¥¡¥¤¥¢¥¦¥©¡¼¥ë¤ÎÀá¤ò¸«¤Æ²¼¤µ¤¤¡£

`kerberos: socket: Unable to open socket...'
     ¥±¥ë¥Ù¥í¥¹¡¦¥µ¡¼¥Ð¤¬³Æ¥¤¥ó¥¿¡¼¥Õ¥§¡¼¥¹¤Î¤¿¤á¤Ë¥½¥±¥Ã¥È¤ò³«¤«¤Ê¤±¤ì¤Ð¤Ê¤ê¤Þ¤»¤ó¡£¤â¤·¡¢Âô»³¤Î²¾ÁÛ¥¤¥ó¥¿¡¼¥Õ¥§¡¼¥¹¤¬¤¢¤ë¥Þ¥·¥ó¤ò»ý¤Ã¤Æ¤¤¤ë¤È¤¹¤ë¤È¡¢¥Õ¥¡¥¤¥ëµ­½Ò»Ò¤ò»È¤¤²Ì¤¿¤¹´í¸±À­¤¬¤¢¤ê¤Þ¤¹¡£¤â¤·¤½¤ì¤¬µ¯¤­¤ë¤È¤³¤Î¥¨¥é¡¼¥á¥Ã¥»¡¼¥¸¤ò¼õ¤±¼è¤ê¤Þ¤¹¡£

`ftp: User foo access denied'
     ÄÌ¾ï¤³¤ì¤Ï¡¢¥æ¡¼¥¶¤Î¥·¥§¥ë¤¬ `/etc/shells'
     ¤Ëµ­½Ò¤µ¤ì¤Æ¤¤¤Ê¤¤¤¿¤á¤Ëµ¯¤³¤ê¤Þ¤¹¡£`/etc/shells'
     ¤ò»ý¤¿¤Ê¤¤¥Ð¡¼¥¸¥ç¥ó¤Î¥·¥¹¥Æ¥à¤Ç¤¢¤Ã¤Æ¤â¡¢`ftpd'
     ¤¬¥Á¥§¥Ã¥¯¤ò¹Ô¤Ê¤¦¤³¤È¤ËÃí°Õ¤·¤Æ²¼¤µ¤¤¡£

`Generic kerberos error'
     ¤³¤ì¤Ï¡¢ÈÆÍÑÅª¤Ë¼õ¤±¼è¤ë¥¨¥é¡¼¥á¥Ã¥»¡¼¥¸¤Ç¤¹¡£

Is Kerberos year 2000 safe?
===========================

Yes.

¤â¤¦¾¯¤·Ä¹¤¤²óÅú¤ò¤¹¤ë¤È¡¢ÊÌ¤Ë²¿¤â²õ¤ì¤ë¤â¤Î¤Ï¤Ê¤¤¤È¹Í¤¨¤Æ¤¤¤Þ¤¹¡£¥×¥í¥È¥³¥ë
¤½¤Î¤â¤Î¤Ï¥Æ¥­¥¹¥È·Á¼°¤Î»þ´Ö¹ï°õ¤Ï»È¤Ã¤Æ¤¤¤Ê¤¤¤·¡¢¸µ¤Î MIT
¥³¡¼¥É¤Ë¤¢¤Ã¤¿2·å¤ÎÇ¯¹æ¤ÎÌäÂê¤âÄ¾¤µ¤ì¤Æ¤¤¤Þ¤¹(¤³¤Î¤Û¤È¤ó¤É¤Ï¥í¥°¥Õ¥¡¥¤¥ë¤ÎÌäÂê¤Ç¤·¤¿)¡£FTP
¥¯¥é¥¤¥¢¥ó¥È¤Ë¤Ï¡¢(´û¤Ë¼èÆÀ¤·¤¿¥Õ¥¡¥¤¥ë¤è¤ê¿·¤·¤¤¥Õ¥¡¥¤¥ë¤À¤±¤ò»ý¤Ã¤Æ¤¯¤ë)
newer ¥³¥Þ¥ó¥É¤Ë¥Ð¥°¤¬¤¢¤ê¤Þ¤·¤¿¡£

Y2KÌäÂê¤È¤¤¤¦¤ï¤±¤Ç¤Ï¤Ê¤¤¤Î¤Ç¤¹¤¬¡¢
¤â¤¦°ì¤Ä¤¢¤ë¤È¤¤¤¨¤Ð¡¢¸Å¤¤¥×¥ê¥ó¥·¥Ñ¥ë¤Î¼º¸úÆüÉÕ¤Ç¤¹¡£MIT
¤Î¥³¡¼¥É¤Ç¤Ï´ö¤Ä¤«¤Î¿·¤·¤¤¥×¥ê¥ó¥·¥Ñ¥ë¤Î¼º¸úÆü¤ò 1999-12-31 ¤Ë¤·¤Æ
¤Þ¤¹¤Î¤Ç¡¢¤½¤¦¤·¤¿ÆüÉÕ¤Î¤â¤Î¤¬¤Ê¤¤¤«¡¢¥Ç¡¼¥¿¥Ù¡¼¥¹¤ò³ÎÇ§¤·¤Æ¤ª¤¤¤¿¤Û¤¦¤¬ÎÉ¤¤¤Ç¤·¤ç¤¦¡£

¤È¤³¤í¤¬¡¢Y2038
ÌäÂê¤Ï²¿¤«¤¬Á´¤¯°ã¤¤¤Þ¤¹(¤·¤«¤·¤Ê¤¬¤é¡¢¤ª¤½¤é¤¯Ãø¼ÔÃ£¤Ï¤½¤Î¤³¤í¤Þ¤Ç¤Ë¤Ï°úÂà¤·¤Æ¤ë¤Ç¤·¤ç¤¦¡£»¡¤¹¤ë¤Ë¡¢Ìîçõ¤¬¤É¤³¤«ÁÇÅ¨¤ÊÃÈ¤«¤¤¾ì½ê¤Ç°é¤Ã¤Æ¤¤¤ë¤³¤È¤Ç¤·¤ç¤¦¡£)

Acknowledgments
***************

¤³¤ÎÈÇ¤Ï¡¢¸µ¡¹ MIT ¥¢¥Æ¥Í¡¦¥×¥í¥¸¥§¥¯¥È(Athena
project)¤Î¿Í¡¹¤¬½ñ¤¤¤¿¥³¡¼¥É¤ò´ð¤Ë¡¢³«È¯¤µ¤ì¤Æ¤¤¤Þ¤¹¡£Kerberos 4
patch-level 9 ¤Ï°Å¹æ²½´Ø¿ô¤È¤½¤Î¸Æ½Ð¤·¤ò¼è¤ê½ü¤«¤ì¤Æ¡¢US ¤«¤é"Bones"
ÈÇ¤È¤·¤ÆÍ¢½Ð¤µ¤ì¤Þ¤·¤¿¡£Eric Young ¤ÏÈà¼«¿È¤¬»ý¤Ã¤Æ¤¤¤ë libdes
¤Ç¤½¤Î¸Æ½Ð¤·¤òÉü¸µ¤·¡¢¤½¤ì¤¬ "eBones" ÈÇ¤È¤Ê¤ê¤Þ¤·¤¿¡£

"rcmd"
¥×¥í¥°¥é¥à·²¤Ï¡¢¸µ¡¹¥«¥ê¥Õ¥©¥ë¥Ë¥¢Âç³Ø¥Ð¡¼¥¯¥ì¡¼¹»(UCB)¤Ç³«È¯¤µ¤ì¤Þ¤·¤¿¤¬¡¢¤½¤Î¸å
FreeBSD ¤ä NetBSD ¤Ê¤É¤Î¥×¥í¥¸¥§¥¯¥È¤Ç²þÎÉ¤µ¤ì¤Þ¤·¤¿¡£

¥Ð¡¼¥¯¥ì¡¼¤Ç¤Ï `ftp', `ftpd', `telnet' ¤ª¤è¤Ó `telnetd'
¤â½ñ¤«¤ì¤Þ¤·¤¿¡£`telnet' ¤È `telnetd' ¤ÎÇ§¾Ú¤È°Å¹æ²½¤Î¥³¡¼¥É¤Ï David
Borman(Åö»þ¡¢Cray Research, Inc.)
¤Ë¤è¤ê²Ã¤¨¤é¤ì¤Þ¤·¤¿¡£°Å¹æ²½¤Î¥³¡¼¥É¤Ï¡¢¤³¤ì¤¬Í¢½Ð¤µ¤ì¤ë»þ¤Ë¤Ïºï½ü¤µ¤ì¡¢¤½¤Î¸å
Juha Eskelinen, `<esc@magic.fi>' ¤Ë¤è¤êºÆ¤ÓÉÕ²Ã¤µ¤ì¤Þ¤·¤¿¡£

`popper' ¤âºÇ½é¤Ï¥Ð¡¼¥¯¥ì¡¼¤Î¥×¥í¥°¥é¥à¤Ç¤·¤¿¡£

`login' ¤â¸»¤ÏÆ±¤¸¤Ç¤¹¤¬¡¢¥ª¥é¥ó¥À¤Î Eindhoven University of Technology
¤Î Wietse Venema ¤¬½ñ¤¤¤¿¥³¡¼¥É¤ò¼õ¤±Æþ¤ì¤Æ¤Þ¤¹¡£

`movemail' ¤Ï (¾¯¤Ê¤¯¤È¤âÉôÊ¬Åª¤Ë¤Ï) Jonathan
Kamens`<jik@security.ov.com>' ¤Ë¤è¤ê½ñ¤«¤ì¡¢(C) 1986, 1991, 1992, 1993,
1994 Free Software Foundation, Inc. ¤¬Ãøºî¸¢¤òÍ­¤·¤Þ¤¹¡£

`xnlock' ¤Ï¡¢¸µ¡¹ 1985 Ç¯ Dan Heller ¤¬ sunview
¤Î¤¿¤á¤Ë½ñ¤­¤Þ¤·¤¿¡£¤½¤Î¸å X ÈÇ¤â 1990 Ç¯¤ËÈà¤¬½ñ¤­¤Þ¤·¤¿¡£

`libroken' ¤Î´ö¤Ä¤«¤Î´Ø¿ô¤â¥Ð¡¼¥¯¥ì¡¼¤«¤é NetBSD/FreeBSD
¤ò·Ð¤ÆÍè¤¿¤â¤Î¤Ç¤¹¡£

AIX ¤Î AFS ¥â¥¸¥å¡¼¥ë¤Î¤¿¤á¤ËÆ°ÅªÆÉ¤ß¹þ¤ß¤ò¼è¤ê°·¤¦¥³¡¼¥É¤Ï (C) 1992
HELIOS Software GmbH 30159 Hannover, Germany. ¤¬Ãøºî¸¢¤òÍ­¤·¤Þ¤¹¡£

`editline' ¤Ï Simmule Turner ¤È Rich Salz ¤¬½ñ¤­¤Þ¤·¤¿¡£

¥Ð¥°½¤Àµ¤È¥³¡¼¥Ç¥£¥ó¥°¤Ï°Ê²¼¤ÎÊý¡¹¤Î¹×¸¥¤Ë¤è¤ê¤Þ¤¹:
Derrick J Brashear
     `<shadow@dementia.org>'

Anders Gertz
     `<gertz@lysator.liu.se>'

Dejan Ilic
     `<svedja@lysator.liu.se>'

Kent Engström
     `<kent@lysator.liu.se>'

Simon Josefsson
     `<jas@pdc.kth.se>'

Robert Malmgren
     `<rom@incolumitas.se>'

Fredrik Ljungberg
     `<flag@astrogator.se>'

Joakim Fallsj
     ö`jfa@pobox.se'

Lars Malinowsky
     `<lama@pdc.kth.se>'

Fabien Coelho
     `<coelho@cri.ensmp.fr>'

Chris Chiappa
     `<griffon+@cmu.edu>'

Gregory S. Stark
     `<gsstark@mit.edu>'

Love Hörnquist-Åstrand
     `<lha@stacken.kth.se>'

Daniel Staaf
     `<d96-dst@nada.kth.se>'

Magnus Ahltorp
     `<map@stacken.kth.se>'

Robert Burgess
     `<rb@stacken.kth.se>'

Lars Arvestad
     `<arve@nada.kth.se>'

Jörgen Wahlsten
     `<wahlsten@pathfinder.com>'

Daniel Staaf
     `<d96-dst@nada.kth.se>'

R Lindsay Todd
     `<toddr@rpi.edu>'

Åke Sandgren
     `<ake@cs.umu.se>'

Thomas Nyström
     `<thn@stacken.kth.se>'

¤½¤ì¤«¤é¡¢¤³¤Îµ­ºÜ¤Ë±Ì¤ì¤Æ¤¤¤ëÊý¤Ï¤É¤¦¤«¤´ÍÆ¼Ï²¼¤µ¤¤¡£
Ian Marsh `<ianm@sics.se>'
¤Ï¤³¤Î¥Æ¥­¥¹¥È¤«¤é±Ñ¸ì¤Î°­¤¤¸À¤¤²ó¤·¤ò¤È¤ê½ü¤­¤Þ¤·¤¿¡£

Ilja Hallberg `<iha@incolumitas.se>'
¤¬Ê¸½ñ¤òÀ¶½ñ¤¹¤ë¤Î¤ò¼êÅÁ¤Ã¤Æ¤¯¤ì¤Æ¤¤¤Þ¤¹¡£

¤³¤Îºî¶È¤Ï¡¢ÉôÊ¬Åª¤Ë¤Ï¡¢ SUNET ¤È KTH ¤ÎÊÂÎó¥³¥ó¥Ô¥å¡¼¥¿¥»¥ó¥¿¡¼(Centre
for Parallel Computers)¤Î»Ù±ç¤Ë¤è¤ê¤Ê¤µ¤ì¤Þ¤·¤¿¡£

Windows 95/NT ¤Ø¤Î°Ü¿¢¤Ï KTH ¤Î¥³¥ó¥Ô¥å¡¼¥¿²ñµÄ¼¼(Computer
Council)¤Î»Ù±ç¤Ç Jörgen Karlsson `<d93-jka@nada.kth.se>'
¤Ë¤è¤ê¤Ê¤µ¤ì¤Þ¤·¤¿¡£

Á´¤Æ¤Î¥Ð¥°¤Ï²æ¡¹¼«¿È¤Ë¤è¤ê¼è¤ê½ü¤«¤ì¤Þ¤·¤¿¡£