RE: changing realm name/alternate realm name, in particular with AFS

[Neulinger, Nathan R.]

Thanks. That's about what I figured. I forgot about that readme in Ken's
stuff. 

How are y'all planning on dealing with ADS? In our case it's being jammed
down our throats by UMSystem, and we're the only site with a krb5 and afs
infrastructure already in place. (We're the ones who ALWAYS get screwed
over, cause we've done most of the stuff already.)

-- Nathan

------------------------------------------------------------
Nathan Neulinger                       EMail:  [EMAIL PROTECTED]
University of Missouri - Rolla         Phone: (573) 341-4841
Computing Services                       Fax: (573) 341-4216


> -----Original Message-----
> From: Von Welch [mailto:[EMAIL PROTECTED]]
> Sent: Friday, May 05, 2000 1:31 PM
> To: Neulinger, Nathan R.
> Cc: '[EMAIL PROTECTED]'; '[EMAIL PROTECTED]'
> Subject: Re: changing realm name/alternate realm name, in particular
> with AFS
> 
> 
> On Fri, May 05, 2000 at 11:26:35AM -0500, Neulinger, Nathan R. wrote:
> ...
> > Related to AFS, is there any way to have the kerberos realm 
> be different
> > than your afs cell name? I remember seeing something in 
> aklog about this,
> > but I wasn't really sure how it functioned. Additionally, 
> if I do this, what
> > happens with the server keys/etc. I suppose I could create 
> a new afs service
> > key and store it in KeyFile even though it has a completely 
> different
> > salt/realm than the previous one.  Has anyone done anything 
> like this?
> 
> We do this here. There is support for it in Ken Hornstein's monster
> patch and I'll point you at the file AFS_K5_NAME_CHANGE that comes
> with his patch for details.
> 
> I don't recommend doing this. It was one of my greatest 
> mistakes to date.
> 
> Von
> 
> -- 
> 
> Von Welch                                              
> [EMAIL PROTECTED]
> Alliance Computational Environment and Security               
>                  NCSA
>