[OpenAFS] Kerberos 5, AFS, and no krb524d

Neulinger, Nathan nneul@umr.edu
Fri, 6 Jun 2003 10:19:13 -0500


> Yes they could be. We are running krb5-1.2.8  See=20
> ftp://achilles.ctd.anl.gov/pub/kerberos.v5/afs524.notes
> ftp://achilles.ctd.anl.gov/pub/kerberos.v5/k5128.cdiffp.20030606
> ftp://achilles.ctd.anl.gov/pub/kerberos.v5/ak5log.20030606.tar
>=20
> Older versions are under=20
> ftp://achilles.ctd.anl.gov/pub/kerberos.v5/old> /
>=20
> Look at the=20
> krb524* changes listed in the k5128 diff file above.=20
> These changes where originally written when we had DFS as well as AFS,
> and we where using trying to use the Transarc AFS/DFS Migration.
> Because of the way it worked, the changes and the ak5log program
> where using principals of afsx/<cell>@<realm>. If you want to
> use your current aklog, you could use the afs/<cell>@<realm>=20
> You will need to change the compare in conv_princ.c from=20
> "afsx" to "afs"
> (But I have not tried this.)=20
>=20
> You need to compile the Kerberos with -DAFS524=20
>=20
> These changes where originally submitted to MIT in 1996.=20
> Maybe it is time to submit them again?=20

Yeah right... :)

You might also look at=20

/afs/umr.edu/software/krb5src/umr.diff

It includes a slightly different version, with similar net effect, based
on Doug's patch.=20

Also includes much of what Ken's monster patch in the migration kit
does.

-- Nathan