Re: Heimdal + AFS + Win2k

[Assar Westerlund <assar@sics.se>]

Derrick J Brashear <shadow@dementia.org> writes:
> > I have read the documentation of Heimdal, but I can't really figure out if
> > it will fit our need.

Well, the documentation still needs quite a lot more text, but I think
the answer is basically yes.

> > * Be compatible with HPUX 10.20 native Kerbers 5 support
> 
> unknown

I do think that what's included in HP-UX 10.20 is (part) of the DCE
client, and Heimdal should be compatible with that.  But that's
rather old code and I have to wonder why that's a requirement.

> > * Be able to use the same passwords on Win2k
> 
> ok. (but if you have v4-salted keys from your kdc, you need a patch to
> ensure win2k clients get a v5 salted key

This will be in the next release.

> assuming one exists; and if not you need a way for a password change
> to be effected so the additional key gets created)

Don't you always need that if you're starting from a v4 database?

/assar