[OpenAFS] Kerberos Authentication with OpenAFS.

Ken Hornstein kenh@cmf.nrl.navy.mil
Sun, 12 May 2002 14:52:50 -0400


>Are you _sure_ it doesn't try it?  I'm only asking because
>it has always worked for me.

Yes, absolutely.  I am sure of this because the aklog I use has never
worked with the athena AFS cell.

>Then again, it's quite possible
>that I patch it to try afs/cell@REALM and, if that fails, to
>try afs@REALM.
>
>The choice of afs@REALM was _always_ a bad idea, and whoever made
>that decision long ago should be shot.

No argument here ... I just want to point out that there will be some
interoperability problems if we tell people to use afs@REALM.  Perhaps
the right advice would be to create both principals (with different
kvnos) during the transition period?

--Ken