[OpenAFS] Kerberos4 needed for windows logon?
Sun, 03 Oct 2010 18:27:26 +0200 (CEST)
> This works perfectly for all our Unix variants. But existing Windows
> clients could not authenticate unless I enable kerberos 4 support
> and diable preauthentication for all users.
Ka was never written for Windows. It had Kerberos v4 from the beginning.
> It feels like a step backwards on security from using the kaserver.
Ka and v4 are both equally backwards.
> Does the openafs client for Windows only work with kerberos4?
You can install a v5 kerberos package (Jeffrey Altman will fill in the blanks).