krbafs provides a set of AFS client utility functions for
managing the AFS client and user's tokens for MIT Kerberos and Kerberos for
Macintosh, the Kerberos implementation included with Mac OS X
10.1. It also provides
afs_string_to_key() and the
Kerberos 4 lifetime functions if they are not available in the local
You do not need krbafs if you are using KTH-krb. krbafs is based on libkafs sources in KTH Kerberos (KTH-krb).
krbafs is used by Arla, a free source AFS implementation. You will need krbafs to build Arla with support for the Kerberos in Mac OS X 10.1 and 10.2.
krbafs is currently only available in source form.
Because of US export regulations, the exportable version of
krbafs on this site does not include the implementation of
afs_string_to_key(). If you are building against a
version of Kerberos which does not export an
afs_string_to_key(), you will need to write or copy your
own implementation into
str2key.c. Mac OS X users
building against Kerberos for Macintosh do not need to do this.
On Mac OS X, krbafs sources build a shared library by default
(Apple recommends this). However, if you require static libraries,
you can specify
--disable-shared when running
You should be aware that krbafs (and Arla) binaries which
were linked against the developer release of Kerberos included in
Mac OS 10.1 will not run on Mac OS 10.2. In 10.1.x, the des library
was accidentally named
libdes524.lib instead of
libdes425.lib. In 10.2.x, the name of the library has
been fixed, but you may need to rebuild any code which linked against
libdes524.dylib, including krbafs and Arla.
If you are building against a clean install of Mac OS X 10.2, make sure to perform a custom install of the Developer Tools package with the "BSD SDK" checked.
Step by step instructions for building krbafs on Mac OS X 10.1 and 10.2:
tar -xf krbafs-1.2-nocrypto.tar
../krbafs-1.2/configure && make
sudo make install
Questions or comments? Send mail to firstname.lastname@example.org
Last updated 12/13/2001