[8522] in Info-AFS_Redistribution
Re: cron on AFS files]
daemon@ATHENA.MIT.EDU (Brandon S. Allbery KF8NH)
Fri Mar 2 21:19:11 2001
Date: Fri, 02 Mar 2001 21:12:29 -0500
From: "Brandon S. Allbery KF8NH" <allbery@ece.cmu.edu>
To: Peter Scott <Peter.J.Scott@jpl.nasa.gov>, info-afs@transarc.com
Message-ID: <61700000.983585549@pyanfar.ece.cmu.edu>
In-Reply-To: <4.3.2.7.2.20010302173700.00b35c80@mail2a.jpl.nasa.gov>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
On Friday, March 02, 2001 17:40:33 -0800, Peter Scott
<Peter.J.Scott@jpl.nasa.gov> wrote:
+-----
| But most of our AFS clients don't have an /etc/krb.conf. That's why our
| primary authentication server has the alias 'kerberos', because we don't
| have the ability to dictate the contents of /etc/krb.conf or environment
| variables on the users' workstations. Yet klog manages to exercise
| redundancy in the face of this... how?
+--->8
/usr/vice/etc/CellServDB serves roughtly the same function for
kaserver-based authentication that /etc/krb.conf serves for krb4.
BTW, you could make your "kerberos" DNS entry a round-robin, or you could
use a version of krb4 which will try kerberos-1, kerberos-2, etc. if
kerberos doesn't respond (KTH kerberos does this).
--
brandon s. allbery [os/2][linux][solaris][japh] allbery@kf8nh.apk.net
system administrator [WAY too many hats] allbery@ece.cmu.edu
electrical and computer engineering KF8NH
carnegie mellon university ["better check the oblivious first" -ke6sls]
