[OpenAFS] Output of tokens command intermittently shows AFS ID

Derrick Brashear shadow@gmail.com
Sun, 28 Mar 2010 22:41:41 -0400


On Thu, Mar 25, 2010 at 11:36 AM, John W. Sopko Jr. <sopko@cs.unc.edu> wrot=
e:
> Does anyone have a clue why the "tokens" command sometimes shows the
> (AFS ID xxxx) and sometimes it does not as shown below? The
> problem is intermittent.

The "problem" is intermittent.

> The systems are rhel5, openafs 1.4.11, using redhats pam_krb5afs.
> This occurs when ssh'ing to machines. If you just do an
> "aklog" after logging in you always get the (AFS ID xxx) format.
>
>
>
> Sometimes you get this, but you do indeed have a token:
>
> % tokens
>
> Tokens held by the Cache Manager:
>
> Tokens for afs@cs.unc.edu [Expires Apr =A01 11:23]

"But" you do indeed have a token? It shows the token, so if you're
surprised, um....

>
> Sometimes you get this output from the tokens command:
>
> % tokens
>
> Tokens held by the Cache Manager:
>
> User's (AFS ID 3903) tokens for afs@cs.unc.edu [Expires Apr =A01 11:28]

This token was gotten by a tool that did the PTS lookup. Not all do.
This ID is irrelevant to the usability of the token.