[OpenAFS] Windows XP SP2, OpenAFS 1.4.3rc3, KfW 2.6.5
Douglas E. Engert
deengert@anl.gov
Wed, 14 Mar 2007 14:57:00 -0500
James Rogers wrote:
> On Mar 14, 2007, at 2:52 PM, Douglas E. Engert wrote:
>
>>
>> Options:
>>
>> Rename one of the realms, and maybe use cross realm between them.
>>
>> Just use the AD KDCs for everything.
>>
>
> Is there some documentation available on how to set up the KfW client to
> use Active Directory KDCs? I'm assuming the 'kdc=' entries in krb5.ini
> will just be the individual names of the domain controllers?
Yes. The Windows AD can act as K5 KDCs. You will then have to register
services like afs/nd.edu@ND.EDU in AD.
Atart with Google: site:microsoft.com kerberos
I always like the original article:
http://www.microsoft.com/technet/prodtechnol/windows2000serv/howto/kerbstep.mspx
>
> --James
>
>
--
Douglas E. Engert <DEEngert@anl.gov>
Argonne National Laboratory
9700 South Cass Avenue
Argonne, Illinois 60439
(630) 252-5444