>>
>> Subject: Re: What's error code "ka 10" mean?
>> Date: Sat, 08 May 93 03:46:17 EDT
>> From: Derek Atkins <[EMAIL PROTECTED]>
>>
>> So, again, I reiterate my statement: If you plan to use Kerberos
>> authentication for anything other than AFS tokens, USE MIT KERBEROS!
>> ***DO NOT USE KASERVER*** -- it will cause you more problems then you
>> will want to deal with. No offense to those transarc people amongst
>> this list, but kaserver sucks hairy rocks....
>>
>> I have a bug-list so big that I can't even submit it!!!
>>
>> -derek
But the problem is that it is hard to find "step-by-step" info on
how to use MIT Kerberos for AFS. I have MIT Kerberos V5 (from Sandia)
running and I would like to use it to service AFS. I would like to
avoid any significant changes in either Kerberos or AFS. Maybe I could
use some code that automatically tries different string-to-key
conversions. If I had the source for such code and it fits into
Kerberos V5.
Currently, the scenario that I have heard about is:
- Get a Kerberos V5 ticket
- Convert to V4 with krb524
- Use aklog to get an AFS token
Then there is the issue of AFS file sharing across cells. My
collaborators at other sites just have AFS. So how do they get a token
for my cell? Or do I use some other mechanism to share files with them.
It would be a BIG help if an "expert" would write a good "how-to"
document about using Kerberos V4 and V5 with AFS. As you observe,
"kaserver sucks hairy rocks", but we need some guidance to carry out
your suggested fix:
USE MIT KERBEROS! ***DO NOT USE KASERVER*** --
Joe Ramus NERSC Livermore (510) 423-8917 [EMAIL PROTECTED]
