[OpenAFS-devel] Krb5-only and KeyFile?

Troy Benjegerdes hozer@hozed.org
Sat, 4 Jun 2005 20:57:24 -0500


On Sat, Jun 04, 2005 at 08:34:50PM -0400, Jeffrey Hutzelman wrote:
> 
> 
> On Saturday, June 04, 2005 07:02:13 PM -0500 Troy Benjegerdes 
> <hozer@hozed.org> wrote:
> 
> >I'm setting up a new cell, and I'd like to try useing DES3 for the
> >Keyfile, or ideally, AES encryption.
> >
> >Is this supported in 1.3.8X, and is there any documentation on how to
> >set it up? 'grep -i des3 doc/html/AdminReference' gives no results.
> 
> (1) No, it is not supported.
> (2) Don't trust the doc tree; it hasn't been touched in ~forever

Okay, failing that, can I do without a krb524d and/or gssklogd running
anywhere?

This seems to keep getting discussed. Does anyone have a roadmap of what
needs to be done to get to full native Krb5 support, and doing away with
a dependence on des keys?