[OpenAFS] Kerberos Authentication with OpenAFS.

Ken Hornstein kenh@cmf.nrl.navy.mil
Sat, 11 May 2002 18:00:39 -0400


>You will need:
>        afs/<cell>@REALM in kerberos, with a des-cbc-crc key only

This brings up something I've been meaning to talk about.

The migration kit's documentation says normally you should use afs@REALM,
because if you're migrating over from V4, that's the name of the principal
you're using.  It only suggests using afs/<cell>@REALM if your cell name
doesn't match your realm.

The problem with using afs/<cell>@REALM is that the stock aklog I have
in the migration kit doesn't try it.  I guess the one you guys are shipping
has been patched.  I'm just wondering if we should think about standardizing
on the principal name, because there seems to be some variance out there.

--Ken