From 9779197ccdedcbfa67c8a10e8e09a5e91e0656ba Mon Sep 17 00:00:00 2001 From: Andrew Deason Date: Tue, 11 Jun 2013 12:56:11 -0500 Subject: [PATCH] GeneralFAQ: misc fixes (krb5, UDP) --- GeneralFAQ.mdwn | 13 +++++++++---- 1 file changed, 9 insertions(+), 4 deletions(-) diff --git a/GeneralFAQ.mdwn b/GeneralFAQ.mdwn index b3d2a4a..fd86e9b 100644 --- a/GeneralFAQ.mdwn +++ b/GeneralFAQ.mdwn @@ -27,7 +27,7 @@ The General Section of the [[AFSFrequentlyAskedQuestions]].
  • 1.06 Which systems is AFS available for?
  • 1.07 What does "ls /afs" display in the Internet AFS filetree?
  • 1.08 Why does AFS use Kerberos authentication?
    • -
  • 1.09 Does AFS work over protocols other than TCP/IP?
    • +
  • 1.09 Does AFS work over protocols other than UDP/IP?
  • 1.10 How can I access AFS from my PC?
  • 1.11 How does AFS compare with NFS?
    • @@ -273,13 +273,18 @@ Kerberos improves security because a users's password need only be entered once AFS uses Kerberos to do complex mutual authentication which means that both the service requester and the service provider have to prove their identities before a service is granted. -Originally AFS shipped with it's own version of a Kerberos, called "KAS." KAS still ships at this time (1.4.2 release) but is depricated in favor of using a true Kerberos 5 implimentation. [[OpenAFS]] does not currently ship with a K5 install; it is up to the administrator(s) to choose a version (either MIT's or KTH's "Heimdal") and install it. [[OpenAFS]] will happily work with either. +Originally AFS shipped with it's own version of a Kerberos, called "KAS." KAS still ships at this time (1.6.2 release) but is deprecated in favor of using a true Kerberos 5 implementation. [[OpenAFS]] does not currently ship with a krb5 install; it is up to the administrator(s) to choose a version (MIT krb5, Heimdal, Active Directory, etc) and install it. [[OpenAFS]] will happily work with any KDC. For more detail on this and other Kerberos issues see the faq for Kerberos (posted to news.answers and comp.protocols.kerberos) [[[Jaspan|FurtherReading#Jaspan]]]. (Also, see [[[Miller87|FurtherReading#Miller87]]], [[[Bryant88|FurtherReading#Bryant88]]], [[[Bellovin90|FurtherReading#Bellovin90]]], [[[Steiner88|FurtherReading#Steiner88]]]) -### 1.09 Does AFS work over protocols other than TCP/IP? +### 1.09 Does AFS work over protocols other than UDP/IP? -No. AFS was designed to work over TCP/IP. +No. AFS was designed to work over UDP/IP, and does not use TCP/IP. + +There is some work being done (see +[here](http://conferences.inf.ed.ac.uk/eakc2012/slides/201210_eakc_oob.pdf)) to +allow AFS to make use of other network transports, including TCP, but this is +still experimental and undergoing development. ### 1.10 How can I access AFS from my PC? -- 1.9.4