[OpenAFS] asetkey, aklog and weird key/principal

Ken Hornstein kenh@cmf.nrl.navy.mil
Tue, 09 Jan 2007 10:06:44 -0500


>ktpass -princ afs/<cell>@<REALM> -mapuser <city>_afs -pass * -crypto DES-CBC-MD5 -out c:\temp\unixkeytab

I thought this was fixed in some version of OpenAFS ... but generally
you should use DES-CBC-CRC instead of DES-CBC-MD5.

Also, I think you managed to expose your afs key in the mail you provided.
It doesn't sound like that key works though, so I guess it's not a big
deal.

--Ken