Is this too big of a change?

Douglas E. Engert deengert at anl.gov
Mon Aug 26 15:57:22 EDT 2002


Sam Hartman wrote:
> 
> >>>>> "Douglas" == Douglas E Engert <deengert at anl.gov> writes:
> 
>     Douglas> The 344 byte limit, sort shoots down the use of the -dfs
>     Douglas> flag we had in the ak5log, if the ticket was from W2K.
> 
> Yes, but  since by that point you're changing clients increase the limit.

Maybe, what I was saying was the ak5log could work with current clients,
if the ticket was less then 344. But changing the clients may not be as difficult 
as one would expect.

> You do have to know you're talking to new servers before using the -dfs flag.

Yes, when it was used with the AFS-DFS translator, I believe you had to know 
the so called AFS cell was the AFS-DFS translator. We really never used
this feature in production, as it was to confusing to try and mix AFS and DFS.



-- 

 Douglas E. Engert  <DEEngert at anl.gov>
 Argonne National Laboratory
 9700 South Cass Avenue
 Argonne, Illinois  60439 
 (630) 252-5444



More information about the Kerberos mailing list