[OpenAFS] Kerberos 5, AFS, and no krb524d

Ken Hornstein kenh@cmf.nrl.navy.mil
Mon, 09 Jun 2003 00:00:02 -0400


>Well, it should be as long as it matches the AFS key on your AFS servers
>(kvno and key). But "not needing krb524" is currently the same as
>otherwise: only if you transmogrify the ticket somehow, namely, stripping
>all but the encrypted part.

I know we had the "apple versus papya" discussion about this earlier,
but I think we're talking past each other.  There really _is_ no
transmogrification w.r.t getting the encrypted part of the V5
ticket, because the encrypted part of the V5 ticket really is the
only thing you can _call_ a ticket.  A small distinction, yes, but
it's not like you're performing open-heart surgery; it's more akin
to picking a carrot and cutting off the end.  I don't think it's really
a huge deal, but I guess we'll have to agree to disagree on this one.

--Ken