On Thu, 29 Jan 1998 14:20:54 -0500, Ken Hornstein <[EMAIL PROTECTED]>  said:

> But at this point you're using Kerberos 4, not "AFS Kerberos" (the
> same goes for the <foo>.krb programs; they get a Kerberos 4 TGT).
> I think when people talk about "AFS Kerberos" (especially in this
> thread), they're talking about different things; I'm not even sure
> what "AFS Kerberos" means exactly myself :-)  Is it something with
> happens to look a lot like Kerberos 4, but uses RX as a transport
> mechanism?  Does it include Kerberos 4, since the kaserver will
> act as a Kerberos 4 KDC?  I think that's where the confusion comes
> in.

AFS kerberos just means that the AFS kaserver is acting as your kerberos
database.  the client API and the transport mechanisms are all the same as
say, MIT kerberos.  the only real difference (in the client libraries, 
that is...) lies in the DES string_to_key function, which unfortunately
makes "standard" kerberos clients incompatible.  compiling with AFS
kerberos libs (or the KTH distribution) makes this problem go away.

------------------------------------------------------------------------
| Jeff Horwitz                                  University of Michigan |
| [EMAIL PROTECTED]                                         Ann Arbor |
| http://www-personal.umich.edu/~jhorwitz            ITD Login Service |
------------------------------------------------------------------------

Reply via email to