[OpenAFS] Re: AFS + CrossRealm + FreeIPA + Migration

[Andrew Deason]

On Mon, 10 Nov 2014 10:09:54 +0100
Andreas Ladanyi <andreas.ladanyi@kit.edu> wrote:

> Now aklog works and i can get a AFS token. Why are all this keys
> important for aklog ? Or which key exeptly the DES key is important ?

That is indeed a bit puzzling; it's possible ipa-getkeytab does
something else that makes this work, but I don't know enough about the
details of what that does. I assume the tokens you get with 'aklog' work
fine?

What enctype is listed for the afs/cell@REALM principal if you run
'klist -ef' after you have a token? What version of openafs is on the
client where you're running 'aklog'?

-- 
Andrew Deason
adeason@sinenomine.net