[OpenAFS] Two realms and one cell

Harald Barth haba@kth.se
Thu, 03 Jul 2014 13:59:59 +0200 (CEST)

> A little question. We have one AFS cell myrealm.fr and a Kerberos
> realm myrealm.fr. We must use our AFS cell with a another realm named
> otherrealm.fr. There is no trusted relations between myrealm.fr and
> otherrealm.fr. Is it possible ?

If you don't trust otherrealm.fr enough to establish cross-realm, you
probably don't trust otherrealm.fr enough to give them a set of AFS
service keys for your servers.

Then users from otherrealm.fr must have identity@myrealm.fr or any
other realm you trust.