ted creedon wrote:
> 1. Is the AFS service ticket the only thing needed to make an afs token?

yes

> 2. I.e. does pts handle all the afs permissions from then on?

yes

> 3. can "kinit admin" now authenticate to  AD instead of a krb5 server?

this has been true since Windows started using Kerberos.

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Reply via email to