[19642] in Kerberos
Re: AFS and Kerberos 5
daemon@ATHENA.MIT.EDU (Russ Allbery)
Tue Jul 22 18:58:16 2003
From: Russ Allbery <rra@stanford.edu>
Date: Tue, 22 Jul 2003 15:44:10 -0700
Message-ID: <8765lunpvp.fsf@windlord.stanford.edu>
To: kerberos@MIT.EDU
Errors-To: kerberos-bounces@mit.edu
Sam Hartman <hartmans@mit.edu> writes:
>>>>>> "MattW" == MattW <mbw@u.washington.edu> writes:
> MattW> Can I leave my Kerberos 5 KDC in pure Kerb 5 mode or do I
> MattW> have to run some kind of Kerb 5-to-4 daemon to issue kerb 4
> MattW> tickets to the AFS server - I'd like to be pure kerb 5 if
> MattW> possible.
> You could in theory use a special aklog, but you are probably better
> off running a krb524d.
Out of curiosity, why would you say that? The native Kerberos v5 support
in OpenAFS looks a lot nicer and means that there's no Kerberos v4
exposure at all.
--
Russ Allbery (rra@stanford.edu) <http://www.eyrie.org/~eagle/>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos