[OpenAFS] AFS Cell name vs K5 REALM name

John W. Sopko Jr. sopko@cs.unc.edu
Thu, 15 Feb 2007 14:32:20 -0500


Is there any good reason(s) for NOT deploying a
Kerberos REALM name that is different from the
AFS cell name. When we move to a K5 server I may
have to use a different REALM name on the db/file servers.
I want to be sure this will not be a problem in the future.

I have tested different realm/cell names and it works now.
I would prefer to have my cell name and realm name match as
it does now and I know that is the recommendation. For
political reasons I may not have that luxury when moving
to K5 authentication.

Thanks for your input.

-- 
John W. Sopko Jr.               University of North Carolina
email: sopko AT cs.unc.edu      Computer Science Dept., CB 3175
Phone: 919-962-1844             Sitterson Hall; Room 044
Fax:   919-962-1799             Chapel Hill, NC 27599-3175