[OpenAFS] gssklog

Douglas E. Engert deengert@anl.gov
Wed, 27 Aug 2003 10:18:50 -0500


Jerome Walter wrote:
> 
> On Tue, Aug 26, 2003 at 02:20:04PM -0500, Douglas E. Engert wrote:
> > Leave off the --enable-server and it should only build the client.
> 
> Ok, i  compiled it, and it works great ... on the server.
> The client on the Solaris gives me the following error :
> 
> GSS-error acquiring credentials: major_status:00070000 minor_status:00000000
> No credentials were supplied, or the credentials were unavailable or
> inaccessible
> mech_dh: Success
> Unable to get user credentials


See the responses from the Sun people yesterday. GSS is "generic" and there
can be more then one mechanism. On the Sun it is trying the DH mech,
as it is listed first in the /etc/gss/mech file.  

  > If using Solaris 8, also be sure to download the Solaris Encryption Pack
  > for Solaris 8 (free download from http://www.sun.com/software/solaris/encryption)
  > in order to get the correct encryption algorithms for Kerberos and GSSAPI.
  > By default, the SEAM package for Solaris 8 includes a "neutered" kerberos
  > implementation because at the time that the packages were created, we
  > were bound by much stricter export control laws.  Also get the latest
  > patches from sunsolve.sun.com.
  > 
  > In Solaris 9, the Kerberos crypto is installed by default.
  > 
  > -Wyllys

  > Yes, Solaris' GSS-API implementation lives in libgss.so.
  > 
  > The first entry in /etc/gss/mech corresponds to the default mechanism
  > wherever GSS_C_NULL_OID refers to the default mechanism.
  > 
  > Cheers,
  > 
  > Nico

> 
> And thus, using gssklog with any options. Does someone have a clue about
> what's happening ? does this come from bad compiling or just a
> misconfiguration on whatever side between client and server ?
> 
> What does i need exactly to get this to run ?
> 
> Sincerely,
> 
> Jerome Walter
> --
> -+--   Jérôme Walter -  I2 EFREI                          ----+-
>  Equipe Système - Efrei Robotique - Jap'Efrei - Erasmus Tutors
>  "The World is my country" - "Nihon no tomodachi desu"
> EFREI System and Networking guide http://perso.efrei.fr/~walter/

-- 

 Douglas E. Engert  <DEEngert@anl.gov>
 Argonne National Laboratory
 9700 South Cass Avenue
 Argonne, Illinois  60439 
 (630) 252-5444