[OpenAFS] OpenAfs+Kerberos+OSXLion+Finder+Two Realms

Chris Jones jonesc@hep.phy.cam.ac.uk
Thu, 22 Sep 2011 13:13:43 +0100


--Apple-Mail=_BF75A798-8E09-4349-AE57-C139DB9816BA
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=windows-1252


On 22 Sep 2011, at 1:04pm, Ivan Glushkov wrote:

>>=20
>> Been getting it every since updating to Lion, but never got around to =
looking into it ?
>>=20
>=20
> I added=20
>=20
> allow_weak_crypto =3D true
>=20
> in the [libdefaults] part of /etc/krb5.conf and it works for me. I =
have no idea what exactly this means - is my encryption somehow weaker?!

The option name certainly suggests this.

Of course, I could have done that as well, but I generally don't like =
editing system files in that way, certainly without really knowing why =
its needed=85.

Chris=

--Apple-Mail=_BF75A798-8E09-4349-AE57-C139DB9816BA
Content-Disposition: attachment;
	filename=smime.p7s
Content-Type: application/pkcs7-signature;
	name=smime.p7s
Content-Transfer-Encoding: base64

MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIIpzCCA50w
ggKFoAMCAQICAQEwDQYJKoZIhvcNAQEFBQAwVDELMAkGA1UEBhMCVUsxFTATBgNVBAoTDGVTY2ll
bmNlUm9vdDESMBAGA1UECxMJQXV0aG9yaXR5MRowGAYDVQQDExFVSyBlLVNjaWVuY2UgUm9vdDAe
Fw0wNzEwMzAwOTAwMDBaFw0xMjEwMzAwOTAwMDBaMFAxCzAJBgNVBAYTAlVLMRMwEQYDVQQKEwpl
U2NpZW5jZUNBMRIwEAYDVQQLEwlBdXRob3JpdHkxGDAWBgNVBAMTD1VLIGUtU2NpZW5jZSBDQTCC
ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKiLzrqU9dd0vcvY5LOoTb7BplF0pwm73FLx
A7xrStS+HXazBi8GwBGelcAyYlEu2fvLVZSSENZxbUteGMpyLauJLogRAdJYt0mCggl51LErs/+Y
xrpSY61cM6DaYdzy3I2rqcgppFksRHILTqWuXGViN0oTyOAtRYqOHC5bUxbpxhsGFG7FGFBA+nMi
4rhhT9nxQ8hOxE6EMXWL+o0cogDheC9ENjKuRZSjJwKlw1J+qLbF81UYfMq8YPNZY8/PBzyntEq4
wBPY1E2F6E+KvcfH9YcJUCiPiVJG1/BjIJEJH3e4suFbF3auFCLvPN3LuF7n7pkJqTaixo6RkhWW
Xf0CAwEAAaN+MHwwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFGZh
3XoN5l/bioUCtjE1rdisXYcSMB8GA1UdIwQYMBaAFF74G0imd2spPC4AUzMrY6J7fpPAMBkGA1Ud
IAQSMBAwDgYMKwYBBAHZLwEBAgECMA0GCSqGSIb3DQEBBQUAA4IBAQDGFY+ytNGBZIiK+IKkH7K6
ok18clgJJLM+Ht4VOQ0ydZOjbGWr+BcuMtqcdj1qUJoljo2UAQOIP7dV0tYr570I0xkUWC/c8ZnD
aTbwrZYInZfKlfp7xk0dzGuSgd0VdVsy8osVcSE4vdmm1XgavKE8XqgnHZNvc3gRJBtLzZ64UMba
rqdOBes78qzk7TQyv1soghH5AothebkC+2wKXXe9s9buGGXo0YbCFrENIT6y7m9PkM+q5lupGxXt
87OUSM600GLhpui2hAL0wDTmAI0Kc8TkepLgyGh1H3PA+xmTKccgO+wehwOyv/uh5dvRuXWcFEa5
kQG8eu+sdxH9qaPLMIIFAjCCA+qgAwIBAgIDAICvMA0GCSqGSIb3DQEBBQUAMFAxCzAJBgNVBAYT
AlVLMRMwEQYDVQQKEwplU2NpZW5jZUNBMRIwEAYDVQQLEwlBdXRob3JpdHkxGDAWBgNVBAMTD1VL
IGUtU2NpZW5jZSBDQTAeFw0xMTA4MDEwOTI2MDlaFw0xMjA4MzAwOTI2MDlaMGUxCzAJBgNVBAYT
AlVLMREwDwYDVQQKEwhlU2NpZW5jZTESMBAGA1UECxMJQ2FtYnJpZGdlMQwwCgYDVQQHEwNVQ1Mx
ITAfBgNVBAMTGGNocmlzdG9waGVyIHJvYmVydCBqb25lczCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJ0uYF/40gwBd6b325cpaoMSv4W24D+6nZBte0zweHdE3NGHESa4zcei3giy7sF3
iy8bWOdPsUkXra9ptmjoe9iwZWcYfoxDc+ofQfvYFEI7uNuht30dGeq4G4IHh308D5Fa4ZqUBUO+
xuJPwTwFCo35nkWNVyeco5NLkgIwK6CzL53JXNGA8r/PYQwytgl3FOr/AnxAFkqZHrC5MIxnVry6
NUXsez1itsY71bfC5sx0JbEag0LtQBGsYPFi6yaabWeIEG5Y8g/65ZT+V6vUcz/qbjgA+b2HNOZ9
27rE6hkHnds339rTPA5GHQpwv4r3nKdFkSJPXRrctRX65CIJQr8CAwEAAaOCAc4wggHKMAwGA1Ud
EwEB/wQCMAAwEQYJYIZIAYb4QgEBBAQDAgWgMA4GA1UdDwEB/wQEAwIDqDAsBglghkgBhvhCAQ0E
HxYdVUsgZS1TY2llbmNlIFVzZXIgQ2VydGlmaWNhdGUwHQYDVR0OBBYEFAufAxyVsrf5Z0gUkQyS
NZ3PQNM4MB8GA1UdIwQYMBaAFGZh3XoN5l/bioUCtjE1rdisXYcSMCMGA1UdEQQcMBqBGGpvbmVz
Y0BoZXAucGh5LmNhbS5hYy51azAlBgNVHRIEHjAcgRpzdXBwb3J0QGdyaWQtc3VwcG9ydC5hYy51
azAZBgNVHSAEEjAQMA4GDCsGAQQB2S8BAQEBCDBABglghkgBhvhCAQQEMxYxaHR0cDovL2NhLmdy
aWQtc3VwcG9ydC5hYy51ay9wdWIvY3JsL3Jvb3QtY3JsLmNybDA+BglghkgBhvhCAQMEMRYvaHR0
cDovL2NhLmdyaWQtc3VwcG9ydC5hYy51ay9wdWIvY3JsL2NhLWNybC5jcmwwQAYDVR0fBDkwNzA1
oDOgMYYvaHR0cDovL2NhLmdyaWQtc3VwcG9ydC5hYy51ay9wdWIvY3JsL2NhLWNybC5jcmwwDQYJ
KoZIhvcNAQEFBQADggEBAFbT1q6aAkLNgtauwiyP+0rpK5C05J/lgH8T9PluZq95SQidT1NOpqcj
UlTyV49XBM7xN4wbKRD74s4HiQd2yfo7Id0lBw58xeLWTjYn+nrp4CzDOvHpdCBH4N24qqMqeFL6
1gtuLUmK955iODUj6A1uPOGbTU+u/1hxtH2YSvalITDmSj4lpSYwRnMuq+arI8AKGragnnoggTK4
H6ZWKrIX5oNUv47O2N1VRadKFWJGb1OyWUVUVL44W8Zg5wLIkQQde1jvpRhvke5ABMf2HSy6vTfF
9bEfqDjfxrZ4n/UCjeJ8bC3I88HaSKLzU87vOCjjMw8kDLHrStAxQKCDL5ExggKxMIICrQIBATBX
MFAxCzAJBgNVBAYTAlVLMRMwEQYDVQQKEwplU2NpZW5jZUNBMRIwEAYDVQQLEwlBdXRob3JpdHkx
GDAWBgNVBAMTD1VLIGUtU2NpZW5jZSBDQQIDAICvMAkGBSsOAwIaBQCgggEvMBgGCSqGSIb3DQEJ
AzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTExMDkyMjEyMTM0M1owIwYJKoZIhvcNAQkE
MRYEFJBm3Z48wSsN8IAz+aNL29SCPPiIMGYGCSsGAQQBgjcQBDFZMFcwUDELMAkGA1UEBhMCVUsx
EzARBgNVBAoTCmVTY2llbmNlQ0ExEjAQBgNVBAsTCUF1dGhvcml0eTEYMBYGA1UEAxMPVUsgZS1T
Y2llbmNlIENBAgMAgK8waAYLKoZIhvcNAQkQAgsxWaBXMFAxCzAJBgNVBAYTAlVLMRMwEQYDVQQK
EwplU2NpZW5jZUNBMRIwEAYDVQQLEwlBdXRob3JpdHkxGDAWBgNVBAMTD1VLIGUtU2NpZW5jZSBD
QQIDAICvMA0GCSqGSIb3DQEBAQUABIIBAH0pYDQ1RJ+XobjvidZ1dPE4Qgutu0FBg+snL7xW3BjR
QbnreaCIRhF9G2ZUyaW/hff2vmZuVVCePXx7naIAcr4Ss7IdeaQgLRXc4jm8Kuq310zzpGkMdL6/
B6LrlqLU0SOt+E/t+JE09inTCy/BA/0UpgC4vKjktJV/qXXhlguLbeEnK6xON51WWRuVtM4BBH1A
1MJGEiEHZ0JnUSaqF04gbrqbgtuQr8LTRNky80cJ7DGjCirXTdXIlwGHjCKBijN5V3k1Z3r7QxlU
prBjpVTtv+DtVBM7+2n19BCnV05nPyaRTNHze+cfbqgcoeKReCEDEXrxoXNrQUtMcl7v3T8AAAAA
AAA=

--Apple-Mail=_BF75A798-8E09-4349-AE57-C139DB9816BA--