Re: Question about using Kerberos with AFS

[Mitch Collinsworth]

On Tue, 2 Jan 2001, Ken Hornstein wrote:

> The _real_ issue comes up with AFS compatibility.  You need to salt the
> password with the correct realm name ... and that ends up being tricky.
> Maybe part of this guy's problem was that his AFS cell name didn't
> match his Kerberos realm name, so perhaps I'm overstating the problem.
> But it _does_ make things harder; believe me, I'd try to avoid it
> if at all possible.

Ok, so then what happens when you have to change your DNS name down
the road?  If you then change your kerb realm to match, won't that
force a flag day for password changes?

-Mitch