[OpenAFS] concise Kerberos 5 / OpenAFS setup doc?
Ken Hornstein
kenh@cmf.nrl.navy.mil
Tue, 29 Nov 2005 10:34:35 -0500
>Does there exist any *concise* documentation for
>migrating to Kerberos 5 from the built-in OpenAFS Kerberos?
I can only say that every migration I've known about has been a little
bit different than every other one. Some are a LOT different. This
seems to be related that every installation treats authentication
differently.
I know you said you didn't want to spend a week learning about all
of the Kerberos-related stuff, but a migration documentation would have
to allow for the following variances:
- Do you want traditional OpenAFS authentication tools (klog) to still
work?
- Do you intend on using PAM?
- Do you have a KDC already? If so, which one?
- Do you intend to have your KDC have the same realm name as your OpenAFS
cell name?
- What remote access utilities do you want to use to access your system?
ssh? Kerberos telnet/rlogin?
... and the list goes on. That's why when I did the AFS-Kerberos 5 migration
kit I tried to explain what was going on behind the scenes so the user
could have enough information to make their own decision. The people I
knew who had the best success migrating to Kerberos 5 had to learn
everything you didn't want to understand.
--Ken