[OpenAFS] Problems with ACLS

Stefan Michael Guenther s.guenther@in-put.de
Mon, 7 May 2012 16:45:20 +0200


although I think that I have set the ACLs correctly, the AFS Server denies access for my client.

Here are the settings on the server:

> fs listacl /afs/in-put.de/data/
Access list for /afs/in-put.de/data/ is
Normal rights:
  system:administrators rlidwka
  system:anyuser rl
  stefan rlidwka

According to these settings the user stefan should be able to create a file in /afs/in-put.de/data

And here is the output for the client:

> klist
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: stefan@IN-PUT.DE

Valid starting     Expires            Service principal
05/07/12 15:40:36  05/08/12 15:40:36  krbtgt/IN-PUT.DE@IN-PUT.DE
        renew until 05/07/12 15:40:36
05/07/12 15:41:26  05/08/12 15:40:36  afs/in-put.de@IN-PUT.DE
        renew until 05/07/12 15:40:36


Tokens held by the Cache Manager:

User's (AFS ID 1010) tokens for afs@in-put.de [Expires May  8 15:40]
   --End of list--

> pwd

> touch test
touch: Cannot create "test": Permission denied

Did I miss something obvious??

Thanks for any hint/help,