[OpenAFS] Kerberos Ticket Sizes when using AD as the KDC and OpenAFS

[ted creedon]

So afs knows you're "admin" thru the "kinit admin" via aklog, and the 
single DES key stuffing that takes place when one sets the afs keys up 
takes care of authenticating the afs user to krb5 without having to 
manually enter a password to krb5?

BTW thanks...

ted

Jeffrey Altman wrote:
>ted creedon wrote:
>  
>>1. Is the AFS service ticket the only thing needed to make an afs token?
>>    
>
>yes
>
>  
>>2. I.e. does pts handle all the afs permissions from then on?
>>    
>
>yes
>
>  
>>3. can "kinit admin" now authenticate to  AD instead of a krb5 server?
>>    
>
>this has been true since Windows started using Kerberos.
>
>