[OpenAFS] kaserver

[Derek Atkins]

Debian has a very easy kerberos install.  All you need to do is:
	apt-get krb5-kdc

And viola, you've got a krb5 KDC (KDC == Key Distribution Center, aka a
Kerberos Server).

Setting up kerberos is EASY; all you need to do is tell it your realm
name (which it can sometimes guess based on your host's fqdn) and
then setup a DNS entry for kerberos.REALM.NAME that points to your
KDC.  There you go, you've got Kerberos.

Then you'll need to populate it with principal information, but the
scripts should walk you through that.  Basically you need to create
an afs/<cellname>@REALM principal in the KDC and then propagate that
to the KeyFile for AFS.

Once you've got your cell key setup, you can add users.

-derek

"David J. M. Karlsen" <david@davidkarlsen.com> writes:

> trying a server setup - but I must admit this is hard!
> 
> so to simple things - I thought I would drop the kerberos stuff - and 
> user AFSs own authentication server.
> using binary packages from the openafs site and debian
> the client stuff works OK.
> I'm a little unsure if I've got it all in place.
> 
> I installed the openafs-kpasswd package - this should be "equvalent" to 
> Kerberos right?
> 
> so - reading the IBM manuals - and they refer to they refer to a 
> kaserver - which I don't have. kas is there - but it has no server to 
> talk to.
> 
> also - the pammodules are not installed - and I can't find them 
> anyewhere. I see the sourcefiles are under the modules directory - but 
> this should only provide openafs.o - the module for my kernel ??? seems 
> like there is a lot of other stuff in this dir as well? am I missing 
> something with this package? Alle the readme's I've been reading only 
> tells me to make my kernel , unpack the module and run a make-kpkg 
> modules_image (which works fine). ???
> 
> can anybody point me out in the right direction - If I get this to work 
> I'll promise to wright a thorough HOWTO.
> 
> 
> _______________________________________________
> OpenAFS-info mailing list
> OpenAFS-info@openafs.org
> https://lists.openafs.org/mailman/listinfo/openafs-info

-- 
       Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory
       Member, MIT Student Information Processing Board  (SIPB)
       URL: http://web.mit.edu/warlord/    PP-ASEL-IA     N1NWH
       warlord@MIT.EDU                        PGP key available