[OpenAFS] Token creation with MIT leash if REALM!=Cellname?

Lars Schimmer l.schimmer@cgv.tugraz.at
Tue, 30 Aug 2005 15:32:32 +0200


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Jeffrey Altman wrote:
> Lars:
> 
> Your clients cannot read the contents of the krb.conf file
> on your AFS server.   The clients must determine the Kerberos
> REALM name based upon the DNS name of the VLDB servers.   If
> your VLDB servers have a DNS name that is "cgv.tugraz.at" then
> they will think the realm they belong to is "CGV.TUGRAZ.AT"
> unless you setup per machine "domain_realm" mappings in the
> client's krb5.conf/krb5.ini files.

Thx so far. As long as you are in my near, come ask me and I'll spend
you a dinner ;-)

Another big prob right now:
After setting the kerberos5 realm again, one fileserver lost hist list
of volumes and his /afs link *uuargh*
bos salvage brought all the volumes back, but /afs was gone.
Now I made a new /afs with mkdir /afs chmod 777
And I tried:
fs sa /afs system:anyuser rl
fs: Invalid argument; it is possible that /afs is not in AFS.

Uh, that doesn't sound well. Any hints?

> Jeffrey Altman

Cya
Lars
- --
- -------------------------------------------------------------
TU Graz, Institut für ComputerGraphik & WissensVisualisierung
Tel.: +43 316 873-5405       E-Mail: l.schimmer@cgv.tugraz.at
PGP-Key-ID: 0xB87A0E03
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDFF/wVguzrLh6DgMRAj6RAKDEuk7xOH60DZCInSHtvRVD6urOTwCgzVaq
rMiRAmaxOXjt2+lo9pS/11g=
=+QKJ
-----END PGP SIGNATURE-----