Jonathan Dobbie wrote:
Thank you for the responses, we're still designing our storage system and AFS still seems like the best option. I've installed AFS on a test server (G4 OSX - I figured I'd start with the craziest platform we might want it on)

I'm hoping that if I toss my plan out now, people can point out the holes before I invest too much time in it. The end goal is uptime more than performance.

Our AFS servers would probably all be running linux. Clients are OSX, windows and Linux.

There would be an MSKDC that would trust the main MIT KDC. I need to talk to the Windows Admin about ntlm, but if we need to sync the passwords, thats fine (password change is done via a webpage or command line tools that we wrote, not passwd), if not, the MSKDC will have random passwords.

You don't need to sync passwords. Users can be registered in either realm,
and AFS can be configured to accept either, with or with out cross-realm
trust being in place. If you don't already have both the MS and MIT KDC, consider just using what you have. AFS does not require the setup of an
additional realm.

Thank you for your help

Jonathan Dobbie
Academic System Administrator
Minneapolis College of Art and Design.
_______________________________________________
OpenAFS-info mailing list
[email protected]
https://lists.openafs.org/mailman/listinfo/openafs-info



--

 Douglas E. Engert  <[EMAIL PROTECTED]>
 Argonne National Laboratory
 9700 South Cass Avenue
 Argonne, Illinois  60439
 (630) 252-5444
_______________________________________________
OpenAFS-info mailing list
[email protected]
https://lists.openafs.org/mailman/listinfo/openafs-info

Reply via email to