[OpenAFS] AFS, Kerberos 5, and Windows; questions

[Derrick J Brashear]

On 28 May 2001, Patrick J. LoPresti wrote:

> What are the advantages and disadvantages of including AFS3-salted
> keys in the KDC?  If I understand correctly, I would only need such
> keys for klog to work; if instead we always use (Kerberos 5) kinit and
> aklog, is there any reason to support AFS3-salted keys at all?

Not even: klog will work with v4 salted keys also, back to at least AFS
3.3 and probably further.

I don't have enough experience with win2k and krb5 to comment on that, but
I pestered the relevant person to comment on krb5, ssh and credential
forwarding to please do so, so you should get some feedback on that.

-D