[OpenAFS] Windows XP SP2, OpenAFS 1.4.3rc3, KfW 2.6.5

Douglas E. Engert deengert@anl.gov
Wed, 14 Mar 2007 14:57:00 -0500


James Rogers wrote:
> On Mar 14, 2007, at 2:52 PM, Douglas E. Engert wrote:
> 
>>
>> Options:
>>
>>  Rename one of the realms, and maybe use cross realm between them.
>>
>>  Just use the AD KDCs for everything.
>>
> 
> Is there some documentation available on how to set up the KfW client to 
> use Active Directory KDCs? I'm assuming the 'kdc=' entries in krb5.ini 
> will just be the individual names of the domain controllers?

Yes. The Windows AD can act as K5 KDCs. You will then have to register
services like afs/nd.edu@ND.EDU in AD.

Atart with Google: site:microsoft.com kerberos

I always like the original article:
http://www.microsoft.com/technet/prodtechnol/windows2000serv/howto/kerbstep.mspx

> 
> --James
> 
> 

-- 

  Douglas E. Engert  <DEEngert@anl.gov>
  Argonne National Laboratory
  9700 South Cass Avenue
  Argonne, Illinois  60439
  (630) 252-5444