[OpenAFS] Feasibility: Kerberos+OpenAFS for Red Hat Linux 7.3, 8.0 and MacOS X 10.2?

[Derek Atkins]

Why not just pull down the pre-built RPMs for Red Hat.  Pick
whatever RH version you wish (7.3 or 8.0), pull down the
various OpenAFS RPMS, install the RH kerberos packages,
and away you go.  The only thing that's really missing
is "pam-openafs-session", or some other pam module that
will acquire an AFS PAG and Token from a krb5 ticket.  You
can try pam_krb5afs, but I don't know where that would
be acquired.

However, it should be a "piece of cake" to set this all up
using existing software.

-derek

"Bryan J. Smith" <b.j.smith@ieee.org> writes:

> All, sorry to put such a "broad" question to the list, but I'm coming onto a new
> project.
> 
> Basically, I'm looking to setup a new network with a 100% Kerberos+OpenAFS
> solution.  The systems:
> 
>        KDC:  Red Hat Linux 8.0 (or 7.3, whatever is recommended)
> AFS Server:  Red Hat Linux 8.0 (or 7.3, whatever is recommended)
> 
>    Clients:  Red Hat Linux 8.0
>              Red Hat Linux 7.3
>              MacOS X 10.2
> 
> As far as software, I'm assuming I can do the following:
> 
>        KDC:  Use the Kerberos 5 capabilities in Red Hat Linux 8.0
> AFS Server:  Build the OpenAFS daemon from OpenAFS.org source
> 
>    Clients:  Native Kerberos 5 clients in Red Hat / MacOS X 10.2
>              Patch/binaries OpenAFS from OpenAFS.org
> 
> Just looking for a "thumbs up" and any suggestions or possible issues I'll have.
>  Windows clients are few and, as far as I'm concerned, will stay segmented (at
> least for now).
> 
> Don't consider myself an OpenAFS guru yet, although I've gotten a few Kerberos
> realms setup with Red Hat Linux 7.3/8.0 in the past.
> 
> Thanx.
> 
>               
> -- 
> Bryan J. Smith     (suffix-free title for your protection)
> mailto:b.j.smith@ieee.org             http://www.thebs.org
> ----------------------------------------------------------
>    community : free will          communism : will free
> 
> _______________________________________________
> OpenAFS-info mailing list
> OpenAFS-info@openafs.org
> https://lists.openafs.org/mailman/listinfo/openafs-info

-- 
       Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory
       Member, MIT Student Information Processing Board  (SIPB)
       URL: http://web.mit.edu/warlord/    PP-ASEL-IA     N1NWH
       warlord@MIT.EDU                        PGP key available