Jiann-Ming Su wrote: > I'm trying to deploy my OpenAFS cell on a Kerberos realm that doesn't > match the cell name -- I don't control the Kerberos realm. On the > README.servers.gz file that's distributed with the Debian packages, it > says: > > If your Kerberos realm name does not match your AFS cell name (if, > for instance, you have one Kerberos realm with multiple AFS cells), > use "afs/cell.name" as the name of the principal above instead of > just "afs", where cell.name is the name of your new AFS cell. > > Is it absolutely necessary to create the service principal as > "afs/cell.name"? That is, does it need the "/"? Can it be > "afs_cell.name"? Thanks for any tips and clarifications.
You can call it anything you want but if you want the standard tools for
constructing tokens to work with your cell, you will call it
afs/[EMAIL PROTECTED]
as in
afs/[EMAIL PROTECTED]
or
afs/[EMAIL PROTECTED]
or
afs/[EMAIL PROTECTED]
Jeffrey Altman
smime.p7s
Description: S/MIME Cryptographic Signature
