[OpenAFS] ka-forwarder -> fakeka malformed (bad password)

Jeffrey Hutzelman jhutz@cmu.edu
Thu, 29 Jun 2006 20:37:29 -0400


On Thursday, June 29, 2006 03:46:48 PM -0400 Ken Hornstein 
<kenh@cmf.nrl.navy.mil> wrote:

> You're pretty hosed here.  ka-forwarder only handles Rx connections.  What
> the Windows AFS client is doing is trying to talk to Kerberos 4 ports
> on the database servers.  I think your best bet here is to get your
> clients upgraded to the OpenAFS clients that do V5 natively.

As I mentioned in another message, you can work around this by telling your 
windows clients that your KDC's are also database servers (that is, include 
the KDC's in the list of configured database servers for your cell, but 
ONLY ON WINDOWS CLIENTS!).

Alternately, I understand the Swedes have a program that they run on their 
dbservers to forward V4 requests to the KDC.

-- Jeff