[OpenAFS] Heimdal and openafs with Debian.

Mon, 19 Aug 2002 16:16:07 +0200 (MEST)

  This message is in MIME format.  The first part should be readable text,
  while the remaining parts are likely unreadable without MIME-aware tools.
  Send mail to mime@docserver.cac.washington.edu for more info.

--579716367-235185406-1029766567=:29241
Content-Type: TEXT/PLAIN; charset=ISO-8859-1
Content-Transfer-Encoding: 8BIT

On 19 Aug 2002, Daniel Swärd wrote:

> I've created a Kerberos realm on one machine and I want to use another
> one as the afs-server. I just can't figure out how to get a working
> KeyFile to use.
>
> When I do: ktutil copy FILE:keytab.afs AFSKEYFILE:KeyFile
> all I get is an empty KeyFile. What am I doing wrong?
>
> I don't have any problems setting up openafs with MIT Kerberos5, but I
> really should be using Heimdal... ;-)
>

If you like to follow my recipy, I have developed a script to configure
the Heimdal K5 KDC, slave KDC's and clients. You might need to modify the
generated /etc/krb5.conf (or its source in the script)

Wolfgang Friebel

--579716367-235185406-1029766567=:29241
Content-Type: TEXT/PLAIN; charset=US-ASCII; name=heimdalsetup
Content-Transfer-Encoding: BASE64
Content-ID: <Pine.LNX.4.33.0208191616070.29241@pub5.ifh.de>
Content-Description: 
Content-Disposition: attachment; filename=heimdalsetup
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--579716367-235185406-1029766567=:29241--