I found a page of instructions at
wiki.openafs.org/WindowsK5AfsServicePrincipal
which is to create a keytab for the user afs/cell@REALM. It seems to me
that on
current AFS cells, i.e., updated after the recent security patch, there are
a number of
changes that need to be made to this page (which is 6 years old).
Can the user now be afs/cell/cellname@REALM?
Do you still need to use DES encryption types?
Shouldn't the crypto be not DES but arcfour-hmac-md5?
What other changes should or could be made to this page?
-- Owen Le Blanc
