[OpenAFS] Kerberos + Windows

Ben Huntsman ben@huntsmans.net
Tue, 16 Aug 2022 04:43:19 +0000


--_000_MWHPR0701MB36745C9A8A555D39E0680EC4A76B9MWHPR0701MB3674_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Hi guys-
   Does anyone have a recipe for making OpenAFS work with AD 2012 R2 or 201=
6 as a KDC?

   I've seen a few articles on using it with 2008 R2, which mostly involve =
re-enabling des-cbc-crc on the AD side...  Does OpenAFS support the current=
 schemes like aes256-cts-hmac-sha1-96, and has anyone gotten that to work?

   Or is one better off by setting up their own Kerbreos just for OpenAFS?

Thank you!

-Ben


--_000_MWHPR0701MB36745C9A8A555D39E0680EC4A76B9MWHPR0701MB3674_
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-=
1">
<style type=3D"text/css" style=3D"display:none;"> P {margin-top:0;margin-bo=
ttom:0;} </style>
</head>
<body dir=3D"ltr">
<div style=3D"font-family: Calibri, Arial, Helvetica, sans-serif; font-size=
: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">
Hi guys-</div>
<div style=3D"font-family: Calibri, Arial, Helvetica, sans-serif; font-size=
: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">
&nbsp; &nbsp;Does anyone have a recipe for making OpenAFS work with AD 2012=
 R2 or 2016 as a KDC?</div>
<div style=3D"font-family: Calibri, Arial, Helvetica, sans-serif; font-size=
: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">
<br>
</div>
<div style=3D"font-family: Calibri, Arial, Helvetica, sans-serif; font-size=
: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">
&nbsp; &nbsp;I've seen a few articles on using it with 2008 R2, which mostl=
y involve re-enabling&nbsp;des-cbc-crc on the AD side...&nbsp; Does OpenAFS=
 support the current schemes like&nbsp;aes256-cts-hmac-sha1-96, and has any=
one gotten that to work?&nbsp;&nbsp;</div>
<div style=3D"font-family: Calibri, Arial, Helvetica, sans-serif; font-size=
: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">
<br>
</div>
<div style=3D"font-family: Calibri, Arial, Helvetica, sans-serif; font-size=
: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">
&nbsp; &nbsp;Or is one better off by setting up their own Kerbreos just for=
 OpenAFS?</div>
<div style=3D"font-family: Calibri, Arial, Helvetica, sans-serif; font-size=
: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">
<br>
</div>
<div style=3D"font-family: Calibri, Arial, Helvetica, sans-serif; font-size=
: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">
Thank you!<br>
<br>
</div>
<div style=3D"font-family: Calibri, Arial, Helvetica, sans-serif; font-size=
: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">
-Ben</div>
<div style=3D"font-family: Calibri, Arial, Helvetica, sans-serif; font-size=
: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">
<br>
</div>
</body>
</html>

--_000_MWHPR0701MB36745C9A8A555D39E0680EC4A76B9MWHPR0701MB3674_--