[OpenAFS] AFS, MIT Krb5, W2k

Michael Lasevich openafslist@lasevich.net
Fri, 19 Apr 2002 11:09:44 -0700


ms2mit.exe is found in MIT kerberos5 1.2.4 under src/windows/ms2mit
directory : http://web.mit.edu/kerberos/www/

aklog.exe I found in krb524.zip package at
ftp://ftp.cmf.nrl.navy.mil/pub/kerberos5/ NOTE: you have to read README file
to get to the time sensitive directory name to get the files. I think there
is a file there with pre-compiled windows binaries as well (krb5-win32.exe)

-Michael

----- Original Message -----
From: "Charles McIntyre" <mcintyre@cats.ucsc.edu>
To: "Michael Lasevich" <openafslist@lasevich.net>
Sent: Friday, April 19, 2002 10:44 AM
Subject: Re: [OpenAFS] AFS, MIT Krb5, W2k


> Thanks.  I've heard of these utilities, but haven't been able to find
> them.  I'll check out the MIT distribution for ms2mit.  Is the Windows
> version of aklog there too?
>
> C
>
> At 10:30 AM 4/19/2002, Michael Lasevich wrote:
> > > We'd like to migrate to using OpenAFS, but I haven't found a way to
get an
> > > AFS token from the MS tgt.  If there is a way, we would _really_
> >appreciate
> > > learning about it!
> >
> >you need the following in place to do this:
> >
> >ms2mit.exe - gets the MS style memory based K5 ticket and creates a
standard
> >file based one usable by mit's tools  I believe it is part of MIT's
> >kerberos5 1.2.4 distribution under windows dir
> >
> >aklog.exe - does same thing that aklog does under UNIX - uses K5 ticket
to
> >get AFS token
> >
> >What you need to have these working is one of two things, establish trust
> >between domains or run a custom version of krb524d that will allow you to
> >convert from K5 to K4.
> >
> >-Michael
>
>