[OpenAFS] Re: Two realms and one cell

Benjamin Kaduk kaduk@MIT.EDU
Thu, 3 Jul 2014 12:42:14 -0400 (EDT)


On Thu, 3 Jul 2014, Andrew Deason wrote:

> be in the rxkad.keytab/KeyFile files on your servers. If I recall
> correctly, if you're using the single-DES KeyFile, those two principals
> need to be using different kvnos, but I don't think there's any such
> restriction when using rxkad.keytab.

That is correct.
(The unique-kvno restriction is also in place when the KeyFileExt is used 
to store rxkad_krb5 keys, on the git master branch.)

-Ben