On Wed, 2 Nov 2011 17:17:20 +0100 stasheck <[email protected]> wrote:
> What I know, what I need: [...] > - I can form mutual trust relationship between MIT and AD (did that to > test some previous ideas) This isn't strictly necessary, though it may be the easier way to go, depending on your relationship with AD. You can set up the MIT and AD realms as just completely separate realms that both have access to AFS. Just set up each one as if it were the only realm, add the afs service principal for each realm to the afs KeyFile, and put both realms in /usr/afs/etc/krb.conf. -- Andrew Deason [email protected] _______________________________________________ OpenAFS-info mailing list [email protected] https://lists.openafs.org/mailman/listinfo/openafs-info
