[OpenAFS] ADS and MIT Kerberos transition auth continued

Jeffrey Altman jaltman@secure-endpoints.com
Thu, 16 Jul 2009 17:02:19 -0400


Eric Chris Garrison wrote:
> Anything else that we might be missing?  I keep thinking it must be
> something simple.

It has to be key related.  An authenticated/encrypted connection is
possible provided that the key works.  Even if the user name is not
found in the protection database.

I would verify once again using kvno that the key in fact works and that
you are in fact obtaining des based enctypes.

Jeffrey Altman