[OpenAFS] Kerberos + Windows
Ben Huntsman
ben@huntsmans.net
Tue, 16 Aug 2022 04:43:19 +0000
--_000_MWHPR0701MB36745C9A8A555D39E0680EC4A76B9MWHPR0701MB3674_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Hi guys-
Does anyone have a recipe for making OpenAFS work with AD 2012 R2 or 201=
6 as a KDC?
I've seen a few articles on using it with 2008 R2, which mostly involve =
re-enabling des-cbc-crc on the AD side... Does OpenAFS support the current=
schemes like aes256-cts-hmac-sha1-96, and has anyone gotten that to work?
Or is one better off by setting up their own Kerbreos just for OpenAFS?
Thank you!
-Ben
--_000_MWHPR0701MB36745C9A8A555D39E0680EC4A76B9MWHPR0701MB3674_
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-=
1">
<style type=3D"text/css" style=3D"display:none;"> P {margin-top:0;margin-bo=
ttom:0;} </style>
</head>
<body dir=3D"ltr">
<div style=3D"font-family: Calibri, Arial, Helvetica, sans-serif; font-size=
: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">
Hi guys-</div>
<div style=3D"font-family: Calibri, Arial, Helvetica, sans-serif; font-size=
: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">
Does anyone have a recipe for making OpenAFS work with AD 2012=
R2 or 2016 as a KDC?</div>
<div style=3D"font-family: Calibri, Arial, Helvetica, sans-serif; font-size=
: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">
<br>
</div>
<div style=3D"font-family: Calibri, Arial, Helvetica, sans-serif; font-size=
: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">
I've seen a few articles on using it with 2008 R2, which mostl=
y involve re-enabling des-cbc-crc on the AD side... Does OpenAFS=
support the current schemes like aes256-cts-hmac-sha1-96, and has any=
one gotten that to work? </div>
<div style=3D"font-family: Calibri, Arial, Helvetica, sans-serif; font-size=
: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">
<br>
</div>
<div style=3D"font-family: Calibri, Arial, Helvetica, sans-serif; font-size=
: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">
Or is one better off by setting up their own Kerbreos just for=
OpenAFS?</div>
<div style=3D"font-family: Calibri, Arial, Helvetica, sans-serif; font-size=
: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">
<br>
</div>
<div style=3D"font-family: Calibri, Arial, Helvetica, sans-serif; font-size=
: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">
Thank you!<br>
<br>
</div>
<div style=3D"font-family: Calibri, Arial, Helvetica, sans-serif; font-size=
: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">
-Ben</div>
<div style=3D"font-family: Calibri, Arial, Helvetica, sans-serif; font-size=
: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">
<br>
</div>
</body>
</html>
--_000_MWHPR0701MB36745C9A8A555D39E0680EC4A76B9MWHPR0701MB3674_--