[OpenAFS] Kerberos + Windows

[Benjamin Kaduk]

On Wed, Aug 24, 2022 at 04:53:11PM +0000, Ben Huntsman wrote:
> ktpass /princ afs/mydomain.com@AD.MYDOMAIN.COM /mapuser srvAFS /mapop add /out rxkad.keytab +rndpass /crypto all /ptype KRB5_NT_PRINCIPAL +dumpsalt

When the name of the AFS cell does not match the name of the kerberos
realm, the OpenAFS configuration needs to include a krb.conf file to
specify the realm the AFS servers use for authentication.  Note that this
is completely different from the kerberos krb5.conf file and lives in a
different location.

-Ben

sent from mobile