[OpenAFS-devel] aklog on OS X does not contact KDC to obtain AFS serivce principal

Benjamin Kaduk kaduk@MIT.EDU
Thu, 31 Jul 2014 11:12:24 -0400 (EDT)


On Thu, 31 Jul 2014, Brandon Allbery wrote:

> One early thing to check: make sure you are actually using OS X's
> Kerberos. MacPorts or Homebrew may pull in Kerberos as a dependency and
> this can lead to getting tickets with one and then trying to aklog with
> the other, and they may be using different ccaches and sometimes
> different krb5.conf files.

The "different caches" situation should improve with MIT krb5 1.13, with 
https://github.com/krb5/krb5/commit/f2aabecc10508 and 
https://github.com/krb5/krb5/commit/2fa226e13ee3e .

-Ben