[Samba] Re: Samba as gateway MIT kerberos

[Warren Yuen]

>Volker Lendecke <Volker.Lendecke <at> SerNet.DE> writes:

> It's irrelevant whether you have kerberos enabled or not. The only thing to
> make Samba a gateway to AFS is the option --with-fake-kaserver=yes. Setting
> that enables Samba to act as a kaserver. Three things to be done for
> configuration:
> 
> * You have to give Samba access to the AFS KeyFile. This might be a blocker 
>   for you security-wise, but being a kaserver depends on being able to create
>   kerberos tickets. This is done via the command 'net afskey <keyfile>
>   <afs-cellname>'

Thanks very much for the replies. May i ask a few questions regarding the 
replies? sorry if the qustions are too obvious to some of you.


I thought Samba could just act as a client and request tickets from the real 
Kerberos server, just like what the normal kerberos clients do? Does it work 
with Kerberos V? cos I read from some forums that it only works with Kerberos 
IV.

Thanks again for your help.

Warren