1.8. What are the differences between AFS Kerberos and "normal" Kerberos?


The Kerberos used in AFS (formerly known as the Andrew File System) was
developed from the Kerberos 4 papers, but before the protocol was
formalized.

As a result, AFS Kerberos uses the RX protocol for all communication between
the clients and database servers (which function as KDCs in Kerberos
termology)

The standard AFS clients that perform authentication discard the TGT after
they acquire an AFS service ticket. This means that you can't get tickets
for other services using your AFS token.

It is possible to use regular Kerberos instead of AFS Kerberos. For more
information, see Question 2.12.

Top Document: Kerberos FAQ, v2.0 (last modified 8/18/2000)
Previous Document: 1.7. What are the differences between Kerberos Version 4 and Version 5?
Next Document: 1.9. What is the format of principals?

Single Page

[ Usenet FAQs | Search | Web FAQs | Documents | RFC Index ]

Send corrections/additions to the FAQ Maintainer:
Ken Hornstein <kenh@cmf.nrl.navy.mil>

Last Update September 06 2008 @ 00:11 AM