>I'm trying to turn on rx encryption in my afs client. I have been unable to
>track down Greg Hudson to get his "fs crypt" patches. But it's my
>understanding that simply turning on the "cryptall" flag in afs_resource.c
>should do it. When I try that, I either get timeouts or permission denied.
>What am I doing wrong?
The last time this came around, I believe it was discovered that
setting the cryptall flag wasn't enough, because of other brokenness
in the AFS client.
Ah, I found the email on this subject! Chaskiel M Grundman
<[EMAIL PROTECTED]> pointed out to me that modifying cryptall
_also_ changes the security index passed to the remote server to
3, which is invalid (it should be 2).
He sent me a patch; you might try talking to him about it.
--Ken
