...
Note that the terracotta and MySQL listeners only need to accept connections from peer servers in the cluster, so these ports should be configured accordingly in the firewall.
The following certificates/keys need to be created for use by SSL and Kerberos:
- MIT SSL server certificate (CN idp.mit.edu)
- daemon keytab (i.e. daemon/idpe.mit.edu@ATHENA.MIT.EDU)
- application client certificate (CN touchstone-cams.app.mit.edu)
...