[OpenAFS] Problems w/ authentication

Derek Atkins warlord@MIT.EDU
07 Aug 2001 11:28:16 -0400


Ok,

What's in /usr/afs/etc/CellServDB and /usr/afs/etc/ThisCell on
your server?

-derek

Verena Venus <vavenus@cip.informatik.uni-erlangen.de> writes:

> On 7 Aug 2001, Derek Atkins wrote:
> 
> > Verena Venus <vavenus@cip.informatik.uni-erlangen.de> writes:
> >
> > > On 7 Aug 2001, Derek Atkins wrote:
> > >
> > > > Is 'admin' a member of 'system:administrators'?
> > >
> > > Yes, it is:
> > >
> > > [root@pulsar verena]# /opt/afs/bin/pts membership admin -cell
> > > afs.caldera.de -noauth
> > > Groups admin (id: 1) is a member of:
> > >   system:administrators
> >
> > Ok.  This looks fine....
> >
> > > > > [root@pulsar verena]# /opt/afs/bin/fs setacl /afs system:anyuser rl
> > > > > fs: You don't have the required access rights on '/afs'
> > > > > ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
> >
> > Did you replicate your root.afs volume?  If so, then that is your
> > problem.  You can only 'setacl' on a RW volume.
> 
> No, I did not replicate...
> 
> 
> > > > > [root@pulsar verena]# /opt/afs/bin/pts examine admin
> > > > > /opt/afs/bin/pts: security object was passed a bad ticket so couldn't look
> > > > > up names
> > > > > ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
> >
> > What are the contents of /usr/vice/etc/CellServDB and
> > /usr/vice/etc/ThisCell?
> 
> CellServDB:
> 
>   >afs.caldera.de  #Cell name
>   212.34.180.97    #pulsar.caldera.de
> 
> 
> ThisCell:
> 
>   afs.caldera.de
> 
> 
> Verena
> 
> -- 
>   +++ Divide By Cucumber Error. Please Reinstall Universe And Reboot +++
>       -- Hex (from "Hogfather")
> 

-- 
       Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory
       Member, MIT Student Information Processing Board  (SIPB)
       URL: http://web.mit.edu/warlord/    PP-ASEL-IA     N1NWH
       warlord@MIT.EDU                        PGP key available