[284] in Info-AFS_Redistribution
Re: AFS and Kerberos
daemon@ATHENA.MIT.EDU (Liz_Hines@transarc.com)
Thu Aug 15 18:44:19 1991
Date: Thu, 15 Aug 1991 18:24:15 -0400 (EDT)
From: Liz_Hines@transarc.com
To: Info-AFS@transarc.com
Cc: jnm@stc06.ctd.ornl.gov, haynes@cats.ucsc.edu, ccaamrg@ucl.ac.uk
The capability of running AFS and Kerberos together is a feature of AFS that
Transarc is interested in providing. A number of people, including Transarc,
are currently investigating (and implementing) ways to have these work
together more smoothly. What you have seen on this mailing list is the
input from some of the AFS users who have pursued this. Transarc
has gathered up this information and we are putting together a plan (based
on the successful experiences of a number of our AFS sites) for providing
cleaner integration between AFS and Kerberos.
There are several different ways of combining AFS and Kerberos, and there
are AFS sites trying each one. Depending on what a site's primary interest
is, they may want to run AFS's KASERVER, MIT's or DEC's Kerberos server, or
both. AFS's KASERVER gives you AFS-style user and administration interfaces
that sites comfortable with AFS prefer. But sites who are currently using
Athena and want to use AFS will probably want to continue to use the MIT user
and administration interfaces. So pleasing everyone is not as easy as it
seems.
OSF DCE includes AFS and Kerberos. The version of Kerberos is from HP and
is Kerberos V5. Part of the integration work of DCE is to integrate
the file system with this version of Kerberos. Possibly the MIT Athena
people can better comment on the differences between MIT's Kerberos and
the DCE version of Kerberos.
As far as incorporating AFS users and Kerberos users into the DCE world,
Transarc is very concerned about providing a migration path from AFS
to DCE - we have been reviewing the technical merits of several proposals
and when we have worked out the details, we will provide the information
to our AFS users.
Liz Hines
Product Support Manager, File Systems
Transarc Corporation
