Errata

service.hostanem@REALM
should be
service.hostname@REALM

"Since the Needham and Schroeder protocol"
should read
"Since the Needham-Schroeder protocol"

to be consistent with the rest of this section (i.e. "Needham and Schroeder" is use
when mentioning the individuals, but "Needham-Schroeder" is used for referring to the
protocol itself.

The same error is present on page 25, paragraph 2, line 5, where "The Needham and
Schroeder protocol" should read "The Needham-Schroeder protocol".

The line as printed reads:

"...sends the authentication server a message containing the its own identity and the..."
The second word "the" should be omitted, so it reads
"...sends the authentication server a message containing its own identity and the..."

identiacal
should be:
identical

'reply attack' should read 'replay attack'

"since the Kerberos libraries will be smart enough to figure those
out on its own"
should be
"... on their own"

Another tool that can be helpful is the Kerberized telnet daemon. It has rather
verbose output so that errors can be readily gleamed from the messages it prints when
connecting.

NOW READS:
'gleaned'

the URL is broken:
http://theory.stanford.edu/~tjw/krbpass.html

NOW READS:
http://citeseer.nj.nec.com/418833.html

"in 30 day's time"
should read
"in 30 days' time"
(mis-placed apostrophe)

line 5: "severs" should be "servers"

"change to a client application does support Kerberos"
should read
"change to a client application that does support Kerberos"

"such as a PAM module to check if the potential users' shell,
located in /etc/shells"

should probably read

"such as a PAM module to check if the potential user's shell is
listed in /etc/shells"

password required /lib/security/pam_cracklib.so retry=3 type=
should be:
password required /lib/security/pam_cracklib.so retry=3

"Simple and Protected GSSAPI Protection Mechanism"
Should be
"Simple and Protected GSSAPI Negotiation Mechanism".

"om which" should be "of which"

"gleamed" should read "gleaned"

"to carry out an attach on a smart card"
should be
"to carry out an attack on a smart card"

the first item in the list under the text para was
"disallow-postdataed"

NOW READS:
"disallow-postdated"