Thanks for all the replies to our original posting.
After some more experimentation, it appears that we have been able
to
get the kth4 ksrvutil to generate keys (previous problems were
probably operator error cause by late night fatigue.)
Being novices with kerberos and AFS, we do not know what the
advantages are of going to Kerberos 5 and what if any
ramifications
this has on AFS (both in current operations and future upgrades to
AFS).
Since we will be migrating our user community to AFS home
directories,
presumably, if we do want to swap out kaserver and install
Kerberos 5,
now would be the time to do it. However, the issues that concern
us
(not in any particular order) are :
1) Support from Transarc
2) "Interoperability" between AFS and Kerberos 5 (is it possible
that
K5 interoperability will break in some future version of AFS
?)
(Is the "interface definition" between K5 and AFS so well
defined
that future versions of AFS will always work with K5)
3) What fraction of sites use K5 ? (If only a small fraction of
sites use K5 and AFS, and Transarc breaks AFS/K5
interoperability in some future release of AFS, and the
user/developer of the AFS/K5 migration kit moves away from
AFS,
are we SOL ?)
4) What are the benefits of moving to K5 and do they outweigh
any of
the problems/issues expressed in the previous questions ?
--
**************************************************************************
Morris Strongson, RHIC, USAtlas Projects Telephone: (516)344-4192
Information Technology Division (fka CCD) Facsimile: (516)344-7688
Brookhaven National Laboratory Internet: [EMAIL PROTECTED]
Building 515, Upton, NY 11973-5000 WWW: http://www.ccd.bnl.gov/
**************************************************************************
