I notice there are AFS modules in the 2.6 kernel tree - I plan on looking at this in the future.

AFS is in 2.6, however patching your kernel apparently still works better. :/

The problem here is probably the lack of SSO. You log into your windows domain, then you'll need to log in *again* to your AFS. Unless a Windows login can return a kerberos ticket which you can use for AFS, I'm not sure.�� The solution to this is to have a custom GINA which does the login auth against your AFS for you.
I've had the windows client working just fine tho (log into windows, then log into AFS), it works well.

>From the URL Aristotle posted:

We're still working on completing our integration work with Windows 2000 and XP -- we've established cross-realm trust between our nascent Active Directory and our existing K5 realm, and we've been working on trying to arrange to have AFS tokens derived locally from the K5 tickets granted to users on our Windows systems at login time.

So it sounds at least possible.

Maybe this is an area that needs more advocacy (and possibly
effort to make it work smoother?).
��

Definitely needs work to make it smoother :). It's a year or more since I've played with this, I need to find the time to look into it again.

Yeah, perhaps we should start an AFS trend in the lug and get some wiki pages sorted out. :)