[OpenAFS] openAFS 1.4.4 - ticket contained unknown key version number

Hamish hamish@travellingkiwi.com
Fri, 26 Oct 2007 17:54:07 +0100


On Friday 26 October 2007 17:49, Hamish wrote:
> On Friday 26 October 2007 17:17, Christopher D. Clausen wrote:
> > Hamish <hamish@travellingkiwi.com> wrote:
> > > Why the heck do I get an unknown key version when trying to do
> > > anything? I've googled till I'm blue in the face and have only found
> > > some really really old emails asking questions with no answers... The
> > > Wiki seems devoid of any info unless it's using kaserver when it
> > > comes to krb at all...
> >
> > I suspect that your KeyFile contains an entry where the kvno on the KDC
> > does not match.  Delete your KeyFile, recreate a keytab and re-run
> > asetkey (using the proper kvno) to generate a good KeyFile.  Copy this
> > KeyFile to all of your AFS servers and restart all of them.
>
> Thanks. I'd just taken that route when I got your reply. (I think I
> probably stuffed it up trying to build the second machine & rerunning some
> of the commands that should only have been run once. Joys of trying to
> adapt a readme I found on the internet that only deals withinstalling a
> single machine :).
> The local machine works fine now. But when I try to run a command remotely
> (e.g. run bos restart from the first server against the second server I
> installed) it fails with
>
> '(you are not authorised for this operation)'
>
> Both work locally though... And if I append -localauth to the command on
> machine1 to restart machine2 it works...
>

Whoops... Telling lies... My token was old... I unlog'ed, kdestroyed and tried 
again (On machine 2)... kinit works no problems, but aklog is hanging after 

'About to revolve name admin to is in cell xxx.xx.x.com'

H