[OpenAFS-devel] [FYI] Review of http://k5wiki.kerberos.org/wiki/Projects/Disable_DES ending February 13, 2009

[Russ Allbery]

Dean Anderson <dean@av8.com> writes:

> Some AFS sites are still using kerberos 4.  I don't think removing DES
> from latest Kerb. 5 is going to matter much.  I think AFS doesn't just
> take the latest Kerberos code, anyway.

AFS works fine with the latest MIT Kerberos releases and doesn't require
Kerberos v4.  Stanford's cell has no Kerberos v4 implementation involved
whatsoever.  AFS does, however, require DES enctypes.

-- 
Russ Allbery (rra@stanford.edu)             <http://www.eyrie.org/~eagle/>