> I'd be tickled pink if someone were actually implementing a > Samba-AFS gateway using pure Kerberos 5, but AIUI there's still > quite a lot of work involved in getting OpenAFS to use /anything/ > other than DES.
We are actually designing a GSSAPI Rx security method, which will make both Arla and OpenAFS handle Kerberos 5. The protocol and the proof-of-concept implementation isn't finished yet, so don't hold your breath. Hopefully there will be a native Arla implementation on Windows 2000 soon, so that we don't have to use a Samba-AFS gateway. /Magnus
