[OpenAFS] Problems w/ authentication

[Derek Atkins]

Verena Venus <vavenus@cip.informatik.uni-erlangen.de> writes:

> On 7 Aug 2001, Derek Atkins wrote:
> 
> > Is 'admin' a member of 'system:administrators'?
> 
> Yes, it is:
> 
> [root@pulsar verena]# /opt/afs/bin/pts membership admin -cell
> afs.caldera.de -noauth
> Groups admin (id: 1) is a member of:
>   system:administrators

Ok.  This looks fine....

> > > [root@pulsar verena]# /opt/afs/bin/fs setacl /afs system:anyuser rl
> > > fs: You don't have the required access rights on '/afs'
> > > ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Did you replicate your root.afs volume?  If so, then that is your
problem.  You can only 'setacl' on a RW volume.

> > > [root@pulsar verena]# /opt/afs/bin/pts examine admin
> > > /opt/afs/bin/pts: security object was passed a bad ticket so couldn't look
> > > up names
> > > ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

What are the contents of /usr/vice/etc/CellServDB and
/usr/vice/etc/ThisCell?

-derek

-- 
       Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory
       Member, MIT Student Information Processing Board  (SIPB)
       URL: http://web.mit.edu/warlord/    PP-ASEL-IA     N1NWH
       warlord@MIT.EDU                        PGP key available