[OpenAFS] libkrb524 for Heimdal?

Miroslav Ruda ruda@ics.muni.cz
Fri, 25 May 2001 15:54:26 +0200 (CEST)


Johan Danielsson wrote:
> > But what about inverse situation? Do you know how to get token
> > (using Heimdal binaries) from MIT KDC?
> 
> Doesn't it just get a afs service ticket, convert it to v4-form using
> the krb524d, and then shoves it into the kernel?
> 
> If it's this simple, it should work. So where does it fail?

My question was whether someone knows that it works. We did some test
several months ago (using heimdal 0.2and MIT 1.1) and we found that heimdal's 
kauth/afslog use the 524 protocol to obtain the v4 ticket. But we were not
able to configure running MIT KDC to support it. Our situation is slightly
complicated now because we have two realms, one served by MIT and one by 
Heimdal and we want to run afslog across cross-realm. We have working
configuration using two heimdal realms.

Is anyone using such configuration? Should I install latest MIT and Heimdal 
distributions to repeat our tests? 
     
                 Mirek Ruda