[2755] in Kerberos
Re: Turning a Kerberos ticket into an AFS token
daemon@ATHENA.MIT.EDU (Barry Jaspan)
Tue Jul 20 17:00:41 1993
Date: Tue, 20 Jul 93 16:49:32 EDT
From: "Barry Jaspan" <bjaspan@gza.com>
To: Aviel David Rubin <rubin@citi.umich.edu>
Cc: kerberos@Athena.MIT.EDU
In-Reply-To: [2752]
From: Aviel David Rubin <rubin@citi.umich.edu>
Date: Tue, 20 Jul 93 15:11:36 EDT
I am running Kerberos Version 4, and I am trying to find
a way to get an afs token from the kaserver in our
afs cell.
I have the aklog program, but I'm not sure how to set it
up. Do I need a special principal in kerberos to authenticate
to afs?
If what you want to do is use an MIT Kerberos V4 server to get AFS
tokens for your local machine, do this:
1. disable the kaserver completely (via bos)
2. create an afs.<cellname> Kerberos principal
3. extract an afs.<cellname> srvtab, and copy the key from that srvtab
to /usr/afs/etc/KeyFile (the program asetkey will do the copy for you,
or just use emacs; I'm not 100% of the path for KeyFile)
4. restart AFS
Then, as a user, do:
o kinit
o aklog
Barry Jaspan
