[OpenAFS] Native Kerberos 5 support

[Derrick J Brashear]

On Thu, 17 Apr 2003, Ken Hornstein wrote:

> Aklog talks to the 524 ticket converter, but instead of getting back a
> version 4 ticket, it gets back a version 5 ticket (the same one it got sent,
> actually).  yes, before you ask ... this step could easily be skipped, but
> we'd need to keep this around for older versions of aklog, and it's not
> clear yet how to tell aklog that some cells are still V4, and some are V5 now
> (although with a recent CERT advisory, it's clear that the days of V4
> are numbered at a lot of sites).

And should be anywhere it isn't already.

> constraints).  Right now only DES is supported for the service
> ticket as well, and I'm not sure other enctypes will be supported.

Presumably not by rxkad, but by something new (rxgss is the current
theory)