[OpenAFS] Krb5 integration with AFS

[Andreas Haupt]

On Tue, 30 Dec 2003, John Tang Boyland wrote:

> One of the nice things about AFS is that you don't need to do a full kerberos
> configuration in order to use some remote cell, but as far as I can tell,
> kerberos 5 won't let you contact a remote cell unless you have
> that remote cell/realm described in krb5.conf.

That's not true. If the remote realm is configured with DNS (see
http://www.ietf.org/proceedings/02nov/I-D/draft-ietf-krb-wg-krb-dns-locate-03.txt)
you don't need it.

We do this with Heimdal and AFAIK it's possible with MIT as well.

Greetings
Andreas

-- 
Andreas Haupt         E-Mail: ahaupt@ifh.de
 DESY Zeuthen
 Platanenallee 6
 15738 Zeuthen