Douglas E. Engert wrote: > If its the large ticket problem, there is a way to tell AD that the service > ticket for AFS does not need a PAC, thus reducing the size from maybe > 12k to > less then 500 bytes. > > See: http://support.microsoft.com/kb/305144 > And this which adds the NO_AUTH_DATA_REQUIRED > http://support.microsoft.com/kb/832572 > > Your admin can set NO_AUTH_DATA_REQUIRED on the afs service account in AD.
This only works if the afs service ticket is being served by AD. It does not work if cross-realm is being used to access an afs service ticket from a MIT/Heimdal realm. There is no method to remove the PAC from a cross-realm tgt. Jeffrey Altman _______________________________________________ OpenAFS-info mailing list [email protected] https://lists.openafs.org/mailman/listinfo/openafs-info
