[OpenAFS] RE: [Q] aklog with a Windows 2000 KDC?
Economou, Matthew [EESUS]
MEconom@EESUS.JNJ.com
Thu, 19 Apr 2001 12:39:59 -0400
This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.
------_=_NextPart_001_01C0C8EF.5FFA6C00
Content-Type: text/plain;
charset="iso-8859-1"
I don't understand how I have the keys mismatched. Will deleting the
"afs@IRTNOG.ORG" principal in Active Directory and the keytab (and un-
installing OpenAFS) get me back to square one? This is a new cell---no
kaserver or user migration to worry about.
What about the ticket encryption settings? Right now, I'm taking the
default values (which includes MD5 and HMAC tickets, as well as
DES-CBC-CRC).
I get the right tickets using kinit, but Microsoft's instructions say
to use only DES-CBC-CRC, so maybe that's where I'm running into trouble.
Thanks for all your help!
#\Matthew
-----Original Message-----
From: Neulinger, Nathan [mailto:nneul@umr.edu]
Sent: Thursday, April 19, 2001 12:23 PM
To: 'Economou, Matthew [EESUS]'; @Openafs-Info (E-mail)
Subject: RE: [OpenAFS] RE: [Q] aklog with a Windows 2000 KDC?
Sounds to me like you still have the keys mismatched.
------_=_NextPart_001_01C0C8EF.5FFA6C00
Content-Type: text/html;
charset="iso-8859-1"
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<META NAME="Generator" CONTENT="MS Exchange Server version 5.5.2654.19">
<TITLE>RE: [OpenAFS] RE: [Q] aklog with a Windows 2000 KDC?</TITLE>
</HEAD>
<BODY>
<P><FONT SIZE=2>I don't understand how I have the keys mismatched. Will deleting the</FONT>
<BR><FONT SIZE=2>"afs@IRTNOG.ORG" principal in Active Directory and the keytab (and un-</FONT>
<BR><FONT SIZE=2>installing OpenAFS) get me back to square one? This is a new cell---no</FONT>
<BR><FONT SIZE=2>kaserver or user migration to worry about.</FONT>
</P>
<P><FONT SIZE=2>What about the ticket encryption settings? Right now, I'm taking the</FONT>
<BR><FONT SIZE=2>default values (which includes MD5 and HMAC tickets, as well as DES-CBC-CRC).</FONT>
<BR><FONT SIZE=2>I get the right tickets using kinit, but Microsoft's instructions say</FONT>
<BR><FONT SIZE=2>to use only DES-CBC-CRC, so maybe that's where I'm running into trouble.</FONT>
</P>
<P><FONT SIZE=2>Thanks for all your help!</FONT>
<BR><FONT SIZE=2>#\Matthew</FONT>
</P>
<P><FONT SIZE=2>-----Original Message-----</FONT>
<BR><FONT SIZE=2>From: Neulinger, Nathan [<A HREF="mailto:nneul@umr.edu">mailto:nneul@umr.edu</A>]</FONT>
<BR><FONT SIZE=2>Sent: Thursday, April 19, 2001 12:23 PM</FONT>
<BR><FONT SIZE=2>To: 'Economou, Matthew [EESUS]'; @Openafs-Info (E-mail)</FONT>
<BR><FONT SIZE=2>Subject: RE: [OpenAFS] RE: [Q] aklog with a Windows 2000 KDC?</FONT>
</P>
<P><FONT SIZE=2>Sounds to me like you still have the keys mismatched. </FONT>
</P>
</BODY>
</HTML>
------_=_NextPart_001_01C0C8EF.5FFA6C00--