[OpenAFS] Windows 2000 + openafs integration

[Andréas Kühne]

Hi all,

I have been looking through the archives and the Internet in general for information about integration of OpenAFS and Windows 2000.

What I want to do is the following:

I have a WIndows 2000 domain that is spread over 3 sites (connected via a 2Mbit/s WAN). All of the files are currently located at our Stockholm branch. Because of the speed of our links I would like to place an OpenAFS server at each site and spread our files via AFS.

All of our clients are running windows 2000, with domain account (password change every 2 months). This means that we would have to change the passwords on the OpenAFS machines as well. 

What I would like to do is use the Windows 2000 Kerberos 5 service to authenticate the OpenAFS accounts against Active Directory. 2 questions:

1. Is this possible?
2. If so, how do I configure openAFS to authenticate against the Kerberos 5 service?

Regards,

Andréas