On Fri, 2014-08-01 at 10:55 -0400, Dave Botsch wrote: > Could AFS work like other Kerberos apps with more direct use of > kerberos > tickets and just getting the service ticket when needed, versus having > to do something extra (ie aklog)? Dunno. Would be nice, but not > required, IMHO, as long as the user experience is sane.
That's how it used to work (kaserver / klog). There might be some value in a canned minimal Kerberos simulating that setup --- but then again, once you have Kerberos you generally find other uses for it. And then there's the minor issue that the single most widespread use of Kerberos is Active Directory, and from a practical standpoint a "canned" integration mechanism with that is probably more useful. -- brandon s allbery kf8nh sine nomine associates allber...@gmail.com ballb...@sinenomine.net unix openafs kerberos infrastructure xmonad http://sinenomine.net
