[OpenAFS] Basic newbie question...

[Derek Atkins]

Jon Tegner <Jon.Tegner@wiglaf.se> writes:

> Derek Atkins wrote:
> 
> > The main benefit of using a real KDC instead of KAServer is that the
> > KAServer isn't really designed to do well in terms of providing
> > authentication for non-AFS services.  So, if you want to use Kerberos
> > to authenticate other servers, then I would recommend you really use a
> > Kerberos KDC instead of KAServer.
> 
> Where can one find information covering how to do this?

Honestly, I'm not sure if anyone has published a document on how
to do this.  Basically, you:
	1) Install Kerberos
	2) Install AFS
	3) Build (or install) "aklog" and "asetkey", which are the
	   tools used to obtain AFS tokens or install an AFS KeyFile
	   (for AFS Servers) from Kerberos tickets.
	4) Continue as normal; use kinit+aklog instead of klog to get
	   Kerberos Tickets + AFS Tokens

> /jon

-derek

-- 
       Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory
       Member, MIT Student Information Processing Board  (SIPB)
       URL: http://web.mit.edu/warlord/    PP-ASEL-IA     N1NWH
       warlord@MIT.EDU                        PGP key available