[OpenAFS] False replay error with 1.7 on Win 7 client (fwd)

[Steve Gaarder]

On Tue, 11 Dec 2012, Jeffrey Altman wrote:

> Upgrading your AFS principal from afs@ to afs/math.cornell.edu@ will
> fix this problem
> and shorten the time it takes all AFS clients to obtain afs tokens.
>
Thanks. My next question is: if I do this, will it break existing sessions 
using tokens obtained via afs@?  Here's how I think I should make the 
change:

1. Create afs/math.cornell.edu@MATH.CORNELL.EDU
2. Store the key in a keytab file
3. Use asetkey to add the key to the keyfile on each of the AFS servers

thanks,

Steve Gaarder
System Administrator, Dept of Mathematics
Cornell University, Ithaca, NY, USA
gaarder@math.cornell.edu