[7565] in Kerberos
Re: getting tickets from afs?
daemon@ATHENA.MIT.EDU (Mark Eichin)
Mon Jul 1 22:50:00 1996
To: kerberos@MIT.EDU
Date: 01 Jul 1996 21:59:13 -0400
From: Mark Eichin <eichin@cygnus.com>
> The beta 6 man pages talk about the afs3 salt type; does that mean
> that, say, kinit can get tickest from an afs server? Or DCE?
Other way around. You can take an AFS server and convert the keys into
a form usable by the Krb5 KDC (through the v4 compatibility
interface.) AFS uses a (rather mutant) different string-to-key
mechanism, which is what this is the support for. It means that you
can migrate an AFS cell to a krb5 kdc without losing/changing all the
passwords. Cygnus has (wrote) the conversion tool, and plan to include
it in a future MIT release; the kdc/kinit support was in beta6.
_Mark_ <eichin@cygnus.com>
Cygnus Support, Eastern USA
