[OpenAFS] fs setcrypt and transarc

Derrick J Brashear shadow@dementia.org
Thu, 10 Apr 2003 11:04:06 -0400 (EDT)


On Thu, 10 Apr 2003, Jim Rees wrote:

> Various people have talked about putting Kerberos V support in afs with
> support for multiple encryption types, but as far as I know it's just talk.

Well, it's a little more than just talk, but not much.

We want one-key-per-fileserver instead of one-key-per-cell, and then
things become hard because you either need to know all the fileservers
you'll talk to up front, or you need to potentially get krb5 tickets
synchronously (and maybe in the kernel). Ow.