[OpenAFS] afs and samba

Harald Barth haba@kth.se
Tue, 31 Mar 2009 09:43:44 +0200 (CEST)


> 1) old way use a clear text password from client, this option is
> disable by default for security reason. If you want use this method
> you need to set clear text on all your clients

Sounds scary.

> 2) new way, the samba server can work as a kaserver, that means the
> samba can create a afs token for each user ( you need put the key
> master password on samba tdb)

There is another more modern variation of the same theme but with krb5.
Google for kimpersonate.

----

That said, I still would use the clients as AFS clients if possible,
instead of going through a Samba gateway.

Harald.