[OpenAFS] Mapping btw. AFS tokens and Kerberos tickets (Heimdal)

[Russ Allbery]

Volker Lendecke <Volker.Lendecke@SerNet.DE> writes:

> Do the various AFS server accept Kerberos V tickets natively or don't
> they do it?

AFS servers do accept Kerberos V tickets natively, sort of.  They don't do
proper krb5 authentication yet, but they can use the core of a krb5 ticket
as a token provided that you're using DES as the encryption type.  You
still get a single krb5 ticket for the AFS service and use it everywhere,
though.

Full support for Kerberos v5, including other enctypes and individual
service tickets for each server, is still coming.

-- 
Russ Allbery (rra@stanford.edu)             <http://www.eyrie.org/~eagle/>