[Ken Hornstein writes:]
> >This is why a lot of sites are using Kerberos 4 or 5 instead of the AFS
> >kaserver - since the TGT stays around, you can use it to get tickets for
> >other services instead of AFS, and services like POP only need to know
> >their key, instead of the AFS key.
[Nathan Neulinger writes:]
> This is not really an option for us... (Not for anyone really who has an
> already established user base...) Especially since this would mean having
> to change every server, and every station in the cell... Not even remotely
> an option.
You don't need to change your kaserver or afsds, if you don't want to. You
can build K4 libraries that use the string-to-key function AFS uses, build
your KPOP server against it, leave the rest of your AFS installation in place.
Works great. There are other, better options, but that one is the simplest
to do with very limited resources. Thanks to Derrick Brashear, lots of good
pointers can be found in /afs/andrew.cmu.edu/usr/shadow/Public/afs.html.
-- Mike
--
Michael Grubb <[EMAIL PROTECTED]>
Duke University Office of Information Technology
phone +1 919 660 6903 / 409 North Building, Durham NC 27708-0132 USA
Which part of "Congress shall make no law" is so hard to understand?
