[OpenAFS] ISP blocking Krb4 traffic?

John Hascall john@iastate.edu
Thu, 15 Apr 2004 11:36:20 CDT


> >> Is anyone else experiencing this problem, and also are there any
> >> convenient workarounds for this?  What complete stupidity.

> >We have been able to convince some ISPs to block
> >only 4444/tcp and not 4444/udp.  Others have been
> >thicker-headed.  The only solution we have found
> >for our clients behind such boneheadedness is to
> >use a VPN (or switch ISPs).

> The obvious workaround here is to simply have an aklog which doesn't
> perform the 524 step (if you have a modern openafs, it isn't necessary).

In our case, we need 524 for things other than aklog anyway.

Can someone tell me which versions of KfW support the

    krb524_server=<hostname>:<port>

stanza in the config file?


John