[OpenAFS] Future of AFS? Interesting Ideas!?

Paul Blackburn mpb@est.ibm.com
Tue, 17 Dec 2002 09:51:01 +0000


Martin Schulz wrote:

>Ken Hornstein <kenh@cmf.nrl.navy.mil> writes:
>
>  
>
>>And IMHO, OpenAFS is the sort of thing that should make use of a existing
>>single sign-on infrastructure, rather than providing one itself.
>>    
>>
>
>I can only second this. 
>
>Yours,
>  
>
Right, but what do you do for sites which do _not_ have
an existing single sign-on infrastructure?

Also, how do you cope with all the possible types of
single sign-on infrstructures that different sites may implement?

It's a nightmare to try and provide something to please everyone.

IMHO, it makes good sense to provide the sign-on with AFS
(eg kerberos). You can choose to implement something else
if you wish to. AFAIK, AFS has always been capable of being
used either with the kerberos kaserver supplied with it or
with kerberos 5 from MIT.
--
cheers
paul                             http://acm.org/~mpb