> 안녕하세요.
> 보안된 사이트에 접속하려고 하는데
> 잘 접속되는 사이트도 있고 잘 안되는 사이트도 있습니다.
> 잘 안되는 사이트에 이런 메세지가 뜨는군요.

> The identity ceritificated is invalid

> 윈도우즈에선 잘 되는데.....
> 맥이 잘못된건가요 아님 접속하려는 사이트에 문제가 있는건가요?
> 이런 메세지가 뜨는 이유와
> 해결할 수 있는 방법을 알려주세요.
> 감사합니다.

저도 잘은 모르구요, 혹시 학교 같은 데서 Kerberos 인증 시스템을 쓰는데 접속이 안 된다면 다음의 설명을 읽어 보시기 바랍니다. 그런데 MS가 윈2000에서 이 Kerberos를 고쳐서 호환이 안 되게 하려고 시도하고 있다고 들었어요. 만약 그렇게 되면 MIT에서 개발해서 10 년이 넘게 사용되어 온 현재의 Kerberos 표준은 졸지에 비표준으로 전락할 겁니다. 맥사용자도 MS의 시혜를 기다려야겠죠.

==================

The MIT MacDev team is pleased to announce the availability of MIT
Kerberos for Macintosh 3.0. It is available from the MIT Kerberos
site:

http://mit.edu/kerberos/www/

Follow the "Getting Kerberos from MIT" link.

All feedback and bug reports for MIT Kerberos for Macintosh 3.0
should be sent to krbdev@mit.edu

Overview
--------
This is the final release of the new unified MIT Kerberos for
Macintosh 3.0. Support for Kerberos v4 and v5 has finally been rolled
together into one seamless package on Mac OS. KClient has now been
removed as a separate product and while its old driver interface has
been retained for compatibility purposes, KClient is now also
available as CFM shared libraries with a newly refined API.

This is the final release, and does not include a time bomb like the
testing releases did.

MIT Kerberos for Macintosh 3.0 requires a Power Macintosh with Mac OS
8.1 or later.

Changes Since MIT Kerberos For Macintosh 3.0b3 (third testing release)
----------------------------------------------
For end-users:
* Setting the default username for logins is now implemented in
Kerberos Manager.
* Kerberos for Macintosh now searches for the Kerberos Preferences
file at the same level as the MIT Kerberos Library. If you store MIT
Kerberos Library in a folder in the Application Support folder, the
Kerberos Preferences file must now be in that folder too.
* Kerberos for Macintosh now properly deals with asymmetric v4 and v5
realm naming.
* Reduced general library memory requirements by at lest 50K.
* Fixed incorrect display of "expired" under Ticket Lifetime in
Kerberos Manager.
* Change password dialog will now display failures issued by the KDC.
* Many bugs and memory leaks fixed.

Of interest to developers:
* Fixed mutual authentication for KClient 1.5 using applications.

Changes Since MIT Kerberos For Macintosh 3.0a2 (second testing release)
----------------------------------------------
* See the "KfM 3.0 Version History" included in the archive.

Changes since MIT Kerberos for Macintosh 3.0d8 (first testing release)
----------------------------------------------
* See the "KfM 3.0 Version History" included in the archive.

Changes since MIT Kerberos for Macintosh 2.5.1
----------------------------------------------
For end-users:
* Single login gets both Kerberos v4 and Kerberos v5 tickets.
* New more flexible login dialog replaces current KClient one, and is
now displayed by Kerberos v5 applications as well.
* KClient is no longer a separate control panel/extension.
* Kerberos Manager now displays both v4 and v5 tickets.
* krb5.ini, KClient Preferences, Kerberos Manager Preferences, etc
combined into single preferences file ("Kerberos Preferences").
* Includes support for K5Client (see "Enabling K5Client" section below)

Of interest to developers:
* New, revised KClient 3.0 API available as a CFM shared library
instead of a driver. See:

http://web.mit.edu/macdev/Development/MITKerberos/MITKerberosLib/KClient/Docume ntation/index.html

for information about the new API.
* Shim driver that re-routes pre-existing KClient driver calls to
shared library.
* Includes Kerberos v5 1.2.1 with Mac specific optimized Profile Library.
* Includes hardware preauth support (v5 only).
* v4 and v5 tickets are now stored in the same credentials cache.
* Updates to Kerberos5Lib and MIT Support Library may require
re-linking your applications

Distribution Info
-----------------
At this point in time, for this release there is only one package
available which includes both binaries and SDKs. The binaries are for
people to use with their applications in their environments. The SDKs
are for application and library programmers to add Kerberos
functionality to their code or update to newer versions of the
various Kerberos APIs. Source code for components of MIT Kerberos for
Macintosh 3.0 may be released at a later date.

Marshall
--

Marshall Vale | mjv@mit.edu | Information Systems | "Knusprig
Mac Dev Team Lead | Massachusetts Institute of Technology | und Lecker"

http://mit.edu/macdev/www/