[OpenAFS] Help with Windows, OpenAFS 1.7 and Heimdal

[Jeffrey Altman]

This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--------------enigA4F6BC69DACE0B3D57A6D815
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

On 12/15/2011 12:52 PM, Eric Sturdivant wrote:
> On Thu, 15 Dec 2011, Jeffrey Altman wrote:
>=20
>> 32-bit NIM requires the krbv4w32.dll and krb524.dll from MIT KFW.
>> A future Heimdal distribution will bundle them as an optional install
>> item and a future NIM distribution will stop supporting Kerberos v4
>> entirely.
>>
>> For now you can copy the DLLs from the MIT distribution and place them=

>> in your PATH.
>>
>=20
> This gets us a bit further, but now NIM fails getting AFS tokens. The
> error message is "Credentials could not be obtained for cell glue.umd.e=
du".
>=20
> aklog -d shows:
>=20
> C:\Users\Administrator>aklog -d
> Authenticating to cell glue.umd.edu.
> Getting v5 tickets: afs/glue.umd.edu@UMD.EDU
> Kerberos error code returned by get_cred: -1765328234
> aklog: Couldn't get glue.umd.edu AFS tickets: encryption type
> des-cbc-crc is disabled

Kerberos distributions built after 2009 no longer permit DES as an
encryption type by default.  This is true for Microsoft, Apple, MIT,
Heimdal, etc.

To enable DES on the client, add

[libdefaults]
allow_weak_crypto =3D true

Future builds of OpenAFS with native Heimdal support will not require thi=
s.

Jeffrey Altman


--------------enigA4F6BC69DACE0B3D57A6D815
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)

iQEcBAEBAgAGBQJO6j/CAAoJENxm1CNJffh44qgH/3vY68Mozuhh9J1aE7Y0zzgc
kfeu/7aIlwsuCa3YJ7O6f/3/4wirr6xNt9HuC7MsG0kCOF30Gn9kh1/D+Xw098BF
JpOlBVchV6whVRMWCQ7Bd/7S6E/BRql0Wlz3r72SECkMbavNO+u74w8viUqOa1uk
8+m//bonFG2GItwx1EvibyKvipUzvsYtwezGabZUdONGkX1SlY4n32f47ZhFz9Qy
Px43aJmVhafx4NqMlOQDttIL+geVz8olGtFdXjyP6yDkaju9vlf7BMkStf2rO75l
iI2nCmQY8iRiomOKmq+79tupFaYMQfeJZkad06M/QENJ5d0RTq8MqeYmYUZtkEA=
=I7Ph
-----END PGP SIGNATURE-----

--------------enigA4F6BC69DACE0B3D57A6D815--