[OpenAFS] OpenAfs+Kerberos+OSXLion+Finder+Two Realms

Chris Jones jonesc@hep.phy.cam.ac.uk
Thu, 22 Sep 2011 12:55:48 +0100


--Apple-Mail=_764EADCD-DB88-4E2E-93CF-45D38F93F16D
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=iso-8859-1

>=20
> Kerberos in Lion has some bugs, sadly.

Is this one of them ?

> Chris-Jones-Macbook-Pro ~ > kinit jonrob@CERN.CH
> jonrob@CERN.CH's Password:=20
> aklog: Couldn't get cern.ch AFS tickets:
> aklog: encryption type not supported; "allow_weak_crypto =3D true" =
needed in Kerberos configuration while getting AFS tickets
>=20
>=20

Been getting it every since updating to Lion, but never got around to =
looking into it ?

Chris=

--Apple-Mail=_764EADCD-DB88-4E2E-93CF-45D38F93F16D
Content-Disposition: attachment;
	filename=smime.p7s
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Transfer-Encoding: base64
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--Apple-Mail=_764EADCD-DB88-4E2E-93CF-45D38F93F16D--