[OpenAFS] any experiences with OpenAFS client on the upcoming MacOS 10.10 (yosemite) release?

[D Brashear]

--e89a8f50316c43eaef0506004ef1
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

On Wed, Oct 22, 2014 at 5:42 AM, Jan Posp=C3=AD=C5=A1il <honik@kma.zcu.cz> =
wrote:

> Hello.
>
> I have just upgraded from 10.9 with installed OpenAFS client 1.6.6 to
> 10.10 (without reinstalling the OpenAFS client) and I am not able to get
> tokens even with aklog.
>


> Is there a way one can force the default kerberos in Yosemite to
> allow-weak-crypto? Or do I have to install for example the MIT or Heimdal
> kerboeros separately as a workaround before our keys will be upgraded to =
a
> different encryption type (may take rather long time)?
>

You're going to need either a patched Heimdal or an old one; I don't know
if that's also true of MIT. But the code needed in MacOS' bundled Heimdal
simply isn't there. It's not even compiled in.


--=20
D

--e89a8f50316c43eaef0506004ef1
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><br><div class=3D"gmail_extra"><br><div class=3D"gmail_quo=
te">On Wed, Oct 22, 2014 at 5:42 AM, Jan Posp=C3=AD=C5=A1il <span dir=3D"lt=
r">&lt;<a href=3D"mailto:honik@kma.zcu.cz" target=3D"_blank">honik@kma.zcu.=
cz</a>&gt;</span> wrote:<br><blockquote class=3D"gmail_quote" style=3D"marg=
in:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1e=
x">Hello.<br>
<br>
I have just upgraded from 10.9 with installed OpenAFS client 1.6.6 to 10.10=
 (without reinstalling the OpenAFS client) and I am not able to get tokens =
even with aklog.<br></blockquote><div>=C2=A0</div><blockquote class=3D"gmai=
l_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,20=
4,204);padding-left:1ex">
Is there a way one can force the default kerberos in Yosemite to<br>
allow-weak-crypto? Or do I have to install for example the MIT or Heimdal k=
erboeros separately as a workaround before our keys will be upgraded to a d=
ifferent encryption type (may take rather long time)?<br></blockquote><div>=
<br></div><div>You&#39;re going to need either a patched Heimdal or an old =
one; I don&#39;t know if that&#39;s also true of MIT. But the code needed i=
n MacOS&#39; bundled Heimdal simply isn&#39;t there. It&#39;s not even comp=
iled in. <br></div></div><br clear=3D"all"><br>-- <br><div dir=3D"ltr">D</d=
iv>
</div></div>

--e89a8f50316c43eaef0506004ef1--