[OpenAFS] some simple openafs questions

[Faheem Mitha]

On Fri, 25 Jul 2003, Christian Ospelkaus wrote:

> If you compile applications with Kerberos support yourself, this may be
> easier with the MIT version. You need to distinguish between the KDC and the
> client programs. As far as I know, a Heimdal KDC has the advantage that it
> can also provide you with Kerberos 4 backwards compatibility.
>
> On the client side, the Heimdal programs provide excellent AFS integration.
> For example, if I do a kinit, I get a V5 ticket, and it also transparently
> gets an afs token. With MIT, you need to do a kinit to get a V5 ticket, and
> then aklog from the openafs-krb5 package to obtain a token. I use a
> configuration with a Heimdal KDC, the Heimdal client programs, the
> libpam-krb5 PAM module (compiled against MIT libraries) for Kerberos
> authentication at login and the libpam-openafs-session module for token
> grabbing at login.
>
> Note that in order to make it all work that way, heimdal needs to be compiled
> with AFS and kth-krb4 (which is the case with the Debian packages).

Can you tell me which Heimdal Debian packages you need to get the AFS
server working? There are a fair number of them, and the Debian docs
reference the MIT implementation. At a cursory glance, it looks like
installing libkafs0-heimdal with its dependencies might be enough.

                                                              Faheem.