>We're not running OpenAFS. Still Transarc AFS. Heh, sucks to be you :-) >I hadn't heard that there's a pure krb5 solution for AFS, though ... >even with OpenAFS. Well, I wouldn't call it "pure". It's restricted to single-DES, and it's only "sorta" V5, but it's enough to fix the V4 cross-realm security hole. --Ken