Kerberos + Windows

Ben Huntsman <[email protected]> Tue, 16 Aug 2022 04:43:19 +0000

Newsgroups	gmane.comp.file-systems.openafs.general
Message-ID	<MWHPR0701MB36745C9A8A555D39E0680EC4A76B9@MWHPR0701MB3674.namprd07.prod.outlook.com>

Hi guys-
   Does anyone have a recipe for making OpenAFS work with AD 2012 R2 or 2016 as a KDC?

   I've seen a few articles on using it with 2008 R2, which mostly involve re-enabling des-cbc-crc on the AD side...  Does OpenAFS support the current schemes like aes256-cts-hmac-sha1-96, and has anyone gotten that to work?

   Or is one better off by setting up their own Kerbreos just for OpenAFS?

Thank you!

-Ben