[OpenAFS] Using OpenAFS with existing Kerberos servers

Nathan Neulinger nneul@umr.edu
01 Sep 2003 08:45:14 -0500


Yes, do a search for 'krb5 migration kit', or search the list archives
for krb5. Lots of discussion on how to do it. You basically just need a
afs@REALM key on kdc, and a krb524d server w/ aklog on the clients. 

-- Nathan

On Mon, 2003-09-01 at 07:57, David Howells wrote:
> Hi,
> 
> I'd like to use my AFS server with an existing Kerberos setup. However, this
> does not seem to be possible as the kaserver program apparently wants to be
> its own isolated kerberos server.
> 
> Is there any way to bypass the kaserver, and have the other server programs go
> direct to my KDC? Or is it possible to instruct kaserver to chain queries to
> another KDC? Or is there a possibility that the AFS server can be registered
> in the KDC as a Kerberised application, with a shared secret between the KDC
> and the AFS server?
> 
> Thanks for your help,
> David
> _______________________________________________
> OpenAFS-info mailing list
> OpenAFS-info@openafs.org
> https://lists.openafs.org/mailman/listinfo/openafs-info
-- 

------------------------------------------------------------
Nathan Neulinger                       EMail:  nneul@umr.edu
University of Missouri - Rolla         Phone: (573) 341-4841
Computing Services                       Fax: (573) 341-4216