[OpenAFS] gssklog[d] on debian (sparc and intel)

Chris McClimans openafs-info@mcclimans.net
Thu, 28 Aug 2003 09:31:56 -0500


I mean listen to docs and code authors rather than my own 
assumptions... hehe not listen to the docs and author my own 
assumptions.
-chris

On Thursday, August 28, 2003, at 09:11  AM, Chris McClimans wrote:

> I poked around and I thought it was not using the fqdn, but 
> gssklog@oak. I should listen to the docs  and author my own 
> assumptions. ;)
>
> (gdb) print server_name_char
> $4 = 0x31f80 "gssklog@oak"
> (gdb) bt
> #0  main (argc=1, argv=0xeffffd24) at ./gssklogd.c:358
> (gdb) print server_name_char
> $5 = 0x31f80 "gssklog@oak"
> (gdb)
>
> On Thursday, August 28, 2003, at 08:14  AM, Douglas E. Engert wrote:
>
>>
>>
>> Chris McClimans wrote:
>>>
>>> Even though I created a principal for use with gssklog, it doesn't 
>>> seem
>>> to find the correct principal name ;(
>>>
>>> # klist -ket  | grep gssklog
>>>     3 08/27/03 19:58:37 gssklog/oak@CS.TTU.EDU (Triple DES cbc mode 
>>> with
>>> HMAC/sha1)
>>>     3 08/27/03 19:58:37 gssklog/oak@CS.TTU.EDU (DES cbc mode with 
>>> CRC-32)
>>>
>>
>> The hostname in the prinsiple must be fully qualifed like 
>> oak.cs.ttu.edu
>> So the principal must be gssklog/oak.cs.ttu.edu@cCS.TTU.EDU
>>
>>
>>
>>> # ./gssklogd -a /etc/openafs/server/KeyFile -k /etc/krb5.keytab -E
>>> TTU.EDU -E CS.TTU.EDU
>>> GSS-error acquiring credentials: major_status:000d0000
>>> minor_status:025ea101
>>> Miscellaneous failure
>>> No principal in keytab matches desired name
>>
>> Its looking for the full name.
>>
>>>
>>> We are running debian-3.0r1 and used the following configure with
>>> gssklog:
>>>
>>> ./configure --with-afs=/usr --with-gss-include=/usr/include/gssapi \
>>> --with-gss-lib-dir=/usr/lib --with-gss-lib-name=gssapi_krb5 \
>>> --with-client-extra-ldflags=-ldes --with-server-extra-ldflags=-ldes
>>> --enable-server --enable-pam
>>>
>>> Add the following at configure.in line 250:
>>>         linux*)
>>>                 if test "x${CC}" = xgcc ; then
>>>                         LDFLAGS="${LDFLAGS} 
>>> -Wl,--noinhibit-exec,-rpath,${gssklog_cv_rpaths}"
>>>                         LDFLAGS_PAM="${LDFLAGS_PAM} -shared"
>>>                         CFLAGS_PAM="${CFLAGS_PAM} -fPIC"
>>>                 else
>>>                         echo "You may need to add extra LDFLAGS"
>>>                  fi
>>>                  ;;
>>>
>>> --
>>> Chris McClimans  / Director of Undergraduate Labs / Texas Tech 
>>> Computer
>>> Science
>>> http://www.cs.ttu.edu
>>>
>>> _______________________________________________
>>> OpenAFS-info mailing list
>>> OpenAFS-info@openafs.org
>>> https://lists.openafs.org/mailman/listinfo/openafs-info
>>
>> -- 
>>
>>  Douglas E. Engert  <DEEngert@anl.gov>
>>  Argonne National Laboratory
>>  9700 South Cass Avenue
>>  Argonne, Illinois  60439
>>  (630) 252-5444
>
> _______________________________________________
> OpenAFS-info mailing list
> OpenAFS-info@openafs.org
> https://lists.openafs.org/mailman/listinfo/openafs-info
>