Re: Kerberos + Windows

Ken Hornstein <[email protected]> Wed, 24 Aug 2022 21:22:25 -0400

Newsgroups	gmane.comp.file-systems.openafs.general
Message-ID	<[email protected]>

>On Wed, Aug 24, 2022 at 04:53:11PM +0000, Ben Huntsman wrote:
>> ktpass /princ afs/[email protected] /mapuser srvAFS /mapop add /out rxkad.keytab +rndpass /crypto all /ptype KRB5_NT_PRINCIPAL +dumpsalt
>
>When the name of the AFS cell does not match the name of the kerberos
>realm, the OpenAFS configuration needs to include a krb.conf file to
>specify the realm the AFS servers use for authentication.  Note that this
>is completely different from the kerberos krb5.conf file and lives in a
>different location.

Ooof, I totally missed that.  Yes, that would do it.

--Ken