Is this too big of a change?
Douglas E. Engert
deengert at anl.gov
Mon Aug 26 15:57:22 EDT 2002
Sam Hartman wrote:
>
> >>>>> "Douglas" == Douglas E Engert <deengert at anl.gov> writes:
>
> Douglas> The 344 byte limit, sort shoots down the use of the -dfs
> Douglas> flag we had in the ak5log, if the ticket was from W2K.
>
> Yes, but since by that point you're changing clients increase the limit.
Maybe, what I was saying was the ak5log could work with current clients,
if the ticket was less then 344. But changing the clients may not be as difficult
as one would expect.
> You do have to know you're talking to new servers before using the -dfs flag.
Yes, when it was used with the AFS-DFS translator, I believe you had to know
the so called AFS cell was the AFS-DFS translator. We really never used
this feature in production, as it was to confusing to try and mix AFS and DFS.
--
Douglas E. Engert <DEEngert at anl.gov>
Argonne National Laboratory
9700 South Cass Avenue
Argonne, Illinois 60439
(630) 252-5444
More information about the Kerberos
mailing list