LDAP/Kerberos user management

Russ Allbery rra at stanford.edu
Tue Aug 27 20:56:46 EDT 2002


Security Admin <secadmin at visualmedia.com> writes:

> As for AFS, it only uses KRB4.

Mostly, yeah.  You can play games with 524d, but it's K4 under the hood.

> Unless you look at things like OpenAFS.

OpenAFS and Arla are the only versions of AFS available.  IBM is
terminating their commercial product (and OpenAFS is superior in most
respects at this point anyway).

> If you want an encrypted FS you can use Sun's SEAM (SecNFS) which is
> KRB5 based. Or wait for NFSv4

You can get network encryption with AFS.  It's just not really anything to
write home about yet, and it's not on by default.

-- 
Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>



More information about the Kerberos mailing list