[OpenAFS] Kerberos4 needed for windows logon?

[Harald Barth]

> This works perfectly for all our Unix variants. But existing Windows
> clients could not authenticate unless I enable kerberos 4 support
> and diable preauthentication for all users.

Ka was never written for Windows. It had Kerberos v4 from the beginning.

> It feels like a step backwards on security from using the kaserver.

Ka and v4 are both equally backwards.

> Does the openafs client for Windows only work with kerberos4?

You can install a v5 kerberos package (Jeffrey Altman will fill in the blanks).

Harald.