[OpenAFS] Kerberos with AFS
Derek Atkins
warlord@MIT.EDU
21 May 2001 12:45:21 -0400
Did you create an AFS Service Key in your KDC, with the proper name
(either 'afs' or 'afs.your-cell'?) Did you propagate said key to
all your AFS servers?
-derek
Madhuri Athota <madhuria@yahoo.com> writes:
> I have done kinit and i got the TGT. But if i do
> afslog I am getting an error message saying
> " afslog: Failed getting tokens for cell -h in realm
> (local realm)."
> Do i need to create a user with name afs and instance
> as mycellname(like stanford.edu), to make Kerberos
> work with AFS? I actually tried this but still it is
> not working.
>
> -Thanks
> Madhuri
>
>
>
> --- Derek Atkins <warlord@MIT.EDU> wrote:
> > You need to 'kinit' to get your kerberos TGT, and
> > then
> > you need to use 'aklog' of 'afslog' or an equivlant
> > to
> > obtain the appropriate afs service ticket from the
> > KDC
> > and stuff it into the kernel as a token.
> >
> > -derek
> >
> > Madhuri Athota <madhuria@yahoo.com> writes:
> >
> > > Hi,
> > > But Migration kit is for Kerberos5. I want some
> > info
> > > for Kerberos4 with AFS as i have Kerberos4
> > installed
> > > on my m/c.
> > >
> > > Thanks,
> > > Madhuri.
> > >
> > >
> > > --- Martin Schulz
> > <schulz@iwrmm.math.uni-karlsruhe.de>
> > > wrote:
> > > > Madhuri Athota <madhuria@yahoo.com> writes:
> > > >
> > > > > Hi,
> > > > > I have installed Kerberos and it is working
> > > > > properly. I also have AFS client and server
> > > > installed.
> > > > > I stopped Kaserver so now only kerberos is
> > > > running.
> > > > > Now i want to get AFS tokens. Can anyone tell
> > me
> > > > > detailedly how to use Kerberos server with
> > AFS.
> > > >
> > > > The only way I know of is Ken Hornsteins
> > migration
> > > > kit.
> > > >
> > > > See in the FAQ for the URL.
> > > >
> > > > Yours,
> > > > --
> > > > Martin Schulz
> > > > schulz@iwrmm.math.uni-karlsruhe.de
> > > > Uni Karlsruhe, Institut f. wissenschaftliches
> > > > Rechnen u. math. Modellbildung
> > > > Engesser Str. 6, 76128 Karlsruhe
> > >
> > >
> > > __________________________________________________
> > > Do You Yahoo!?
> > > Yahoo! Auctions - buy the things you want at great
> > prices
> > > http://auctions.yahoo.com/
> > > _______________________________________________
> > > OpenAFS-info mailing list
> > > OpenAFS-info@openafs.org
> > >
> >
> https://lists.openafs.org/mailman/listinfo/openafs-info
> >
> > --
> > Derek Atkins, SB '93 MIT EE, SM '95 MIT Media
> > Laboratory
> > Member, MIT Student Information Processing
> > Board (SIPB)
> > URL: http://web.mit.edu/warlord/
> > PP-ASEL-IA N1NWH
> > warlord@MIT.EDU PGP
> > key available
>
>
> __________________________________________________
> Do You Yahoo!?
> Yahoo! Auctions - buy the things you want at great prices
> http://auctions.yahoo.com/
> _______________________________________________
> OpenAFS-info mailing list
> OpenAFS-info@openafs.org
> https://lists.openafs.org/mailman/listinfo/openafs-info
--
Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory
Member, MIT Student Information Processing Board (SIPB)
URL: http://web.mit.edu/warlord/ PP-ASEL-IA N1NWH
warlord@MIT.EDU PGP key available