[OpenAFS] KA server to MIT KRB5 migration issues

Derrick Brashear shadow@gmail.com
Fri, 7 Nov 2008 14:24:30 -0500


On Fri, Nov 7, 2008 at 1:53 PM, Marcus Watts <mdw@umich.edu> wrote:
> Gedaliah Wolosh <gwolosh@njit.edu> writes:
> ...
>>   Is there any way to migrate users from a KA database and authenticate to a KR
>> B5
>>   realm with a different name and NOT have every user change their password?
>>
>> Sorry for the long post.
>
> (the reply will be long too):
>
> The AFS3 string to key function uses the cell name as part of the
> conversion logic.  For klog (with kaserver) that's guaranteed to be
> the case.

Nope. OpenAFS moved to des string to key by default a while ago. klog
tries both, so it "just works".