2.12. We run AFS at our site currently. Is there a way we can run Kerberos along with AFS?


Yes! You should get the AFS-Kerberos 5 Migration Kit. It comes with all of
the tools and documentation you should need. And since it was developed by
the FAQ author, you can be sure it was done by someone who claims they know
what they're talking about.

The latest version of the AFS-Kerberos 5 Migration Kit is 1.2, and includes
patches for Kerberos 1.0.5. You can get it from:

ftp
     <ftp://ftp.cmf.nrl.navy.mil/pub/kerberos5/afs-krb5-1.2.tar.Z>
afs
     <file:///afs/transarc.com/public/afs-contrib/tools/afs-krb5-1.2.tar.Z>

However, if you'd rather not run Kerberos 5, the AFS kaserver already
implements a perfectly adequate Kerberos 4 KDC. In addition to that,
Transarc provides drop-in replacements for the klog, pagsh, and tokens
commands which are Kerberos 4 aware, and retain the Kerberos TGT after
authentication has completed.

Top Document: Kerberos FAQ, v2.0 (last modified 8/18/2000)
Previous Document: 2.11. I can't use kadmin to talk to the admin server of another realm. What am I doing wrong?
Next Document: 2.13. Employee just left the company, and he had root on our KDC. What should I do?

Single Page

[ Usenet FAQs | Search | Web FAQs | Documents | RFC Index ]

Send corrections/additions to the FAQ Maintainer:
Ken Hornstein <kenh@cmf.nrl.navy.mil>

Last Update September 05 2008 @ 00:14 AM