When searching for a service principal, aklog will search for principals in this order afs/your-cell-name.com@ referral request sent to the client principal's REALM afs/your-cell-name.com@REALM afs@REALM If afs/your-cell-name.com@REALM does not exist, there will be a negative lookup and the cost of the extra round trips.
"afs@REALM" should not be used for a new cell. That name made sense when there was a one-to-one mapping between cell and realm due to the existence of "kaserver". The preference for afs/your-cell-name.com@REALM over afs@REALM has been present in OpenAFS since the MIT AFS-Kerberos 5 Migration Kit was merged in November 2004. OpenAFS 1.4.0 was the first release which integrated Kerberos v5 support.
smime.p7s
Description: S/MIME cryptographic signature
