So afs knows you're "admin" thru the "kinit admin" via aklog, and the
single DES key stuffing that takes place when one sets the afs keys up
takes care of authenticating the afs user to krb5 without having to
manually enter a password to krb5?
BTW thanks...
ted
Jeffrey Altman wrote:
ted creedon wrote:
1. Is the AFS service ticket the only thing needed to make an afs token?
yes
2. I.e. does pts handle all the afs permissions from then on?
yes
3. can "kinit admin" now authenticate to AD instead of a krb5 server?
this has been true since Windows started using Kerberos.
_______________________________________________
OpenAFS-info mailing list
[email protected]
https://lists.openafs.org/mailman/listinfo/openafs-info
