[OpenAFS] openafs and kerberos5

Neulinger, Nathan nneul@umr.edu
Mon, 9 Apr 2001 11:29:04 -0500


> Perhaps you have a kvno problem between client/KDC and server?  If the
> kvno (Key Version Number) does not match then you will be rejected
> (even if the key does match).

I've got a very useful patch to krb524d that eliminates this requirement,
also eliminates the need to keep the keys in sync since it will read the
KeyFile directly. (I didn't write it, but I can't remember off the top of my
head who did.) Works pretty well for us.

-- Nathan