Kerberos Key Distribution Center (KDC)

• Also known as The Kerberos Servers
• Provides central AuthN for Cornell
• Hands out K4 and K5 Kerberos tickets
• Provides cross-realm authentication for some group on campus
• Uses MIT Kerberos 1.3.6 (patched with a local mod)
• Fail over provided by Kerberos software on clients
  • Clients try to contact primary server
  • If they can not, they contact the secondary server
• No dynamic load balancing
• OS: Red Hat Enterprise Linux 4
• Production: 2 machines (primary and secondary)
• Machines are in server farm (Dell x86)
  • Two factor AuthN required for SSH login
  • Machines are split between Rhodes and CCC
• Test: 2 machines
• Dev: 1 machine