[OpenAFS] When Using Kerberos5 is klog necessary?

Russ Allbery rra@stanford.edu
Tue, 30 Dec 2003 23:29:22 -0800

David Botsch <dwb7@ccmr.cornell.edu> writes:

> Cross-realmness would be nice. There's a lot of non-technical reasons
> why we can't go there.

You can still use kinit for both cells; you'll just have to qualify the
principal that you're obtaining (which is annoying, I agree).

If you synchronized passwords, it would be easier to hack, but that's even
harder politically than setting up cross-realm trust, so I'm guessing
that's also a non-starter.

Russ Allbery (rra@stanford.edu)             <http://www.eyrie.org/~eagle/>