Customer Reviews

Kerberos: A Network Authentication System

5 star:		(2)
4 star:		(2)
3 star:		(0)
2 star:		(2)
1 star:		(3)

 

 

I'm a developer currently Kerberizing a server application. The chapter on the K5 API was useless. None of the data structures in the API is described and the example for krb5_sendauth is misleading (he fails to mention how the sample string should be retrieved by the server [it can't]).

My e-mails to Mr. Tung have gone unanswered.

My recommendation: don't buy the book -- read his free "Moron's Guide to Kerberos", look at the sample apps in the MIT K5 distribution, search MSDN for articles, and figure it out for yourself!

I bought this book hoping it would help me in installing and using Kerberos. Unfortunately, it is too terse in critical areas (for example, omitting file names and command names) and full of errors. I recommend waiting for other Kerberos books next year (such as Jeffrey Schiller's)

This book was very disappointing. I had high expectations for this book, but you will get more information out of the 3 online docs from MIT (Kerberos Installation Guide, Administration Guide and Users' Guide). Since this is the only book specifically for kerberos, it is by default the best book, but I think that most users and administrators of kerberos will find more prudent information on the web.

I purchased this book in order to read before installing and configuring Kerberos V5 on my servers. My thoughts were that it would be good to have a little book vs. the README files and on-line documents. I was wrong.

For example, section 3.3.2 on configuring the KDC file is missing basic minimal information that it takes to make kerberos work. The instructions are wrong and missing many basic configuration parameters. There are much better sources on the net and the sources are MUCH more accurate.

I hope the next Kerberos book is accurate and value-added. We sure need one!! Kerberos can be complex to install and with Microsoft supporting Kerberos V5 now, we need better books on the subject so we can work on cross-realm or cross-domain interoperability.

Unfortunately, this is not the book for anyone who really wants to install Kerberos and would like a reference to do so. Avoid this one.

I purchased this book in order to read before installing and configuring Kerberos V5 on my servers. My thoughts were that it would be good to have a little book vs. the README files and on-line documents. I was wrong.

For example, section 3.3.2 on configuring the KDC file is missing basic minimal information that it takes to make kerberos work. The instructions are wrong and missing many basic configuration parameters. What did I do? You guessed it. Another poster/review said the exact same thing.

The books is much less helpful than on-line web pages, README files and other documentation. Honestly, book is a waste of money if you actual want to run Kerberos. There are much better sources on the net and the sources are MUCH more accurate.

... this book is honestly a waste of money. I hope the next Kerberos book is accurate and value-added. We sure need one!! Kerberos can be complex to install and with Microsoft supporting Kerberos V5 now, we need better books on the subject so we can work on cross-realm or cross-domain interoperability.

Unfortunately, this is not the book for anyone who really wants to install Kerberos and would like a reference to do so. Perhaps O'Reilly or WROX will have one soon!! Avoid this one.

I needed to "kerberize" a PeopleSoft application. Chapter 4 of this book helped me immensely. It was clear and to-the-point. This book covers Kerberos 5. Although my installation is still using Kerberos 4, this book's description of the process of "kerberizing" an application made the man pages for the Kerberos 4 calls comprehensible to me. I'm grateful.

This book contains much information about kerberos in a small and easy to read book. In some areas it's rather too fast to be understood. It would also be interesting to split this into two little books which are sold together. - The user guide should be forked off and put into a small 30 page book to give to users. This way it would be possible for companies to order many pcs for a small price and give it to their users.

Not a lot of filler that you get with some authors trying to reach the 300+ page mark. The book gets right to the point and is easy to read and understand. Addresses the topic at all levels: user, administrators, and developers. Great job!

The layout of this book is extremely well considered. Depending on the reader, one can focus on the user, admin, or programmer section. The theory is also presented in a separate section with an appropriate level of background security information (you might want to read this section first if you don't have any security background).

The writing is also very well done. Dr. Tung never repeats himself (unlike other technology authors) and his examples are short and to the point. The reader is even, occasionally, treated to a delightful sense of humor. I certinaly hope that Dr. Tung will produce more books.

I recommend this book to anyone, period. Of course, if you are using or developing Kerberos apps, then I really, really recommend it. Any system admin worth his or her salt should read this book as well, even if they are not currently considering Kerberos.

My final thought: this book would make a great stocking stuffer!!!

Dr. Matthew Presley, Chief Scientist, QB, Inc.