[OpenAFS] Problems w/ authentication

Hartmut Reuter reuter@rzg.mpg.de
Tue, 07 Aug 2001 17:20:18 +0200


Is the keyfile on the server correct? 

The answer to the pts commands suggests that there might be something
wrong.

As long as you run the bosserver with -noauth you may compare the keys
by 

	bos listkey

and 

	kas ex afs

-Hartmut

Verena Venus wrote:
> 
> Hello!
> 
> I installed OpenAFS 1.1.1 on a Linux 2.4.5 machine. I created an admin
> account, and everything seems just fine, but when I try to do something I
> get the following:
> 
> [root@pulsar verena]# /opt/afs/bin/klog admin
> Password:
> [root@pulsar verena]# /opt/afs/bin/fs setacl /afs system:anyuser rl
> fs: You don't have the required access rights on '/afs'
> ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
> [root@pulsar verena]# /opt/afs/bin/tokens
> 
> Tokens held by the Cache Manager:
> 
> User's (AFS ID 1) tokens for afs@afs.caldera.de [Expires Aug  8 17:32]
>    --End of list--
> [root@pulsar verena]# date
> Tue Aug  7 16:06:35 CEST 2001
> [root@pulsar verena]# /opt/afs/bin/bos listuser -server pulsar.caldera.de
> -noauth
> SUsers are: admin
> [root@pulsar verena]# /opt/afs/bin/pts examine admin
> /opt/afs/bin/pts: security object was passed a bad ticket so couldn't look
> up names
> ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
> [root@pulsar verena]# /opt/afs/bin/pts examine admin -noauth
> Name: admin, id: 1, owner: system:administrators, creator: anonymous,
>   membership: 1, flags: S----, group quota: unlimited.
> 
> Logs don't show anything strange.
> 
> What's wrong? Why do I have a bad ticket?
> Any suggestions?
> 
> Thanks in advance,
> Verena
> 
> --
>   +++ Divide By Cucumber Error. Please Reinstall Universe And Reboot +++
>       -- Hex (from "Hogfather")
> 
> _______________________________________________
> OpenAFS-info mailing list
> OpenAFS-info@openafs.org
> https://lists.openafs.org/mailman/listinfo/openafs-info

-- 
-----------------------------------------------------------------
Hartmut Reuter                           e-mail reuter@rzg.mpg.de
					   phone +49-89-3299-1328
RZG (Rechenzentrum Garching)               fax   +49-89-3299-1301 
Computing Center of the Max-Planck-Gesellschaft (MPG) and the
Institut fuer Plasmaphysik (IPP)
-----------------------------------------------------------------