Re: /usr/afsws/etc/kas

[Ken Hornstein]

>: How do you do ticket forwarding with Kerberos 4?
>
>The AFS kaserver ignores the IP address in the TGT, so you can pick it up
>and move it to another machine if you so desire.

Oh, that's right ... I forgot about that "feature".

>I use a modified version of
>the ta-rauth code in the Transarc inetd.afs and rcmd() call. I think their
>code only works on IBM or some such, mine works on all the AFS supported
>platforms.

Does your code do encryption, or does it send the session key in the
clear?  (I ask because I know the Transarc code sends it in the clear)

--Ken