[OpenAFS] Re: Windows AFS client / Kerberos V

Joe Buehler jbuehler@spirentcom.com
Tue, 30 Jan 2007 11:04:58 -0500

ted creedon wrote:

> ank -kvno 2 -randkey -e "des-cbc-crc:normal" afs@HEKIMIAN.COM
> This has been discussed before AND NOT ENTERED INTO THE DOCUMENTATION.

I think -randkey causes the salt to be ignored -- I used :afs3 and
a subsequent getprinc says that the principal has no salt.

Converting to Kerberos V has been a bit frustrating -- you can't just
follow a recipe, you have to use Google and learn quite a bit about
K5 and AFS to work through it all.  I'm still learning.

Joe Buehler