[OpenAFS] Quick Start Kerberos problem: can acquire tokens, but they don't work

[Phillip Moore]

--0015175cb6585191220491794df7
Content-Type: text/plain; charset=ISO-8859-1

This is good to know.   Does it seem reasonable to document this as an
alternative to using asetkey for sites that use Heimdal?

If so, I'll include this in the Quick Start Guide patch (which, after all
these promises, I had better submit if I am to regain any credibility
here....)

On Thu, Sep 30, 2010 at 8:21 AM, Harald Barth <haba@kth.se> wrote:

>
> I usually create the AFS principal and put it onto the first server in
> one go with heimdals ktutil:
>
> ktutil -k AFSKEYFILE:/usr/afs/etc/KeyFile get -p your-admin-principal
>  afs/your-cell@YOUR-REALM
>
> The AFSKEYFILE: tells the heimdal library that this is not a normal krb5
> keyfile.
>
> (This is from memory only, so I blame any inaccuracy on that ;-)
>
> Harald.
>
>

--0015175cb6585191220491794df7
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<div><br></div>This is good to know. =A0 Does it seem reasonable to documen=
t this as an alternative to using asetkey for sites that use Heimdal?<div><=
br></div><div>If so, I&#39;ll include this in the Quick Start Guide patch (=
which, after all these promises, I had better submit if I am to regain any =
credibility here....)</div>
<div><div class=3D"gmail_quote"><br></div><div class=3D"gmail_quote">On Thu=
, Sep 30, 2010 at 8:21 AM, Harald Barth <span dir=3D"ltr">&lt;<a href=3D"ma=
ilto:haba@kth.se">haba@kth.se</a>&gt;</span> wrote:<br><blockquote class=3D=
"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding=
-left:1ex;">
<br>
I usually create the AFS principal and put it onto the first server in<br>
one go with heimdals ktutil:<br>
<br>
ktutil -k AFSKEYFILE:/usr/afs/etc/KeyFile get -p your-admin-principal =A0af=
s/your-cell@YOUR-REALM<br>
<br>
The AFSKEYFILE: tells the heimdal library that this is not a normal krb5 ke=
yfile.<br>
<br>
(This is from memory only, so I blame any inaccuracy on that ;-)<br>
<font color=3D"#888888"><br>
Harald.<br>
<br>
</font></blockquote></div><br></div>

--0015175cb6585191220491794df7--