On Fri, May 05, 2000 at 11:26:35AM -0500, Neulinger, Nathan R. wrote:
...
> Related to AFS, is there any way to have the kerberos realm be different
> than your afs cell name? I remember seeing something in aklog about this,
> but I wasn't really sure how it functioned. Additionally, if I do this, what
> happens with the server keys/etc. I suppose I could create a new afs service
> key and store it in KeyFile even though it has a completely different
> salt/realm than the previous one. Has anyone done anything like this?
We do this here. There is support for it in Ken Hornstein's monster
patch and I'll point you at the file AFS_K5_NAME_CHANGE that comes
with his patch for details.
I don't recommend doing this. It was one of my greatest mistakes to date.
Von
--
Von Welch [EMAIL PROTECTED]
Alliance Computational Environment and Security NCSA
