[OpenAFS] Unable to authenticate to AFS because no such entry

[Derek Atkins]

"Pieter-Paul Giesberts (ELN)" <Pieter-Paul.Giesberts@eln.ericsson.se> writes:

> * In kas I have 3 users:
> 	"afs", which key matches the 'bos listkey'
> 	"admin", with ADMIN flag set
> 	"root", with ADMIN flag set
> * I added both admin and root to bos with 'adduser', so when I type bos listusers it returns: "SUsers are: admin root"
> * 'bos listkey' returns the same key as 'examine afs' in kas
> * In pts I added both admin (with ID 7, because I retried deleting and adding it several times) and root (with ID 1), both are member of the system:administrators group. 

This looks fine.

> Still, when I try 'klog admin' or 'klog root' I get the error message!
> Should the admin and root ID's be the same as those from the /etc/passwd file? 

No.  There is no need (practically) for the IDs to match.  It should work
fine without it.

Oh, one other question:  What is the local cell, as listed in
/usr/vice/etc/ThisCell?  Is that correct, and is it what your
servers think they are (/usr/afs/etc/ThisCell)?  Similarly,
are the right DB servers listed in /usr/vice/etc/CellServDB?

-derek

> Pieter-Paul
> 
> BTW: I run Solaris 8 on a Sparc Server 20.
> 
> -----Original Message-----
> From: Derek Atkins [mailto:warlord@MIT.EDU]
> Sent: Monday, June 25, 2001 2:57 PM
> To: Pieter-Paul Giesberts (ELN)
> Cc: 'openafs-info@openafs.org'; 'Neulinger, Nathan'; 'Hartmut Reuter'
> Subject: Re: [OpenAFS] Unable to authenticate to AFS because no such
> entry
> 
> 
> You need at least TWO keys in KAS:
> 
> 	"afs", which should match the 'bos setkey'
> 	<user>, which should not be anywhere else.
> 
> <user> should also be in PTS ("afs" doesn't have to be, IIRC).
> 
> You should never 'klog afs'.  You should 'klog <user>'.
> 
> -derek
> 
> "Pieter-Paul Giesberts (ELN)" <Pieter-Paul.Giesberts@eln.ericsson.se> writes:
> 
> > Yep, 
> > 
> > The user(s) exist; kas and pts don't report any problems.
> > 
> > I added the entries to the system:administrators group and set the ADMIN flags. I can examine (kas) and check the membership (pts) without any problems.
> > 
> > I also have an afs entry in kas, with a correct key (equal to that of bos listkey)
> > 
> > But I still get the 'no such entry' error. I also can't do 'ls /afs' because for this 'permission is denied'. This is probably related?!
> > 
> > Pieter-Paul
> > 
> > -----Original Message-----
> > From: Derek Atkins [mailto:warlord@MIT.EDU]
> > Sent: Friday, June 22, 2001 8:43 PM
> > To: Pieter-Paul Giesberts (ELN)
> > Cc: 'openafs-info@openafs.org'
> > Subject: Re: [OpenAFS] Unable to authenticate to AFS because no such
> > entry
> > 
> > 
> > Is there an entry in the PTServer for the particular user?
> > Is there an entry in the KAServer for the particular user?
> > 
> > -derek
> > 
> > "Pieter-Paul Giesberts (ELN)" <Pieter-Paul.Giesberts@eln.ericsson.se> writes:
> > 
> > > Hi,
> > > 
> > > can someone explain to me why I get this message when I try to do klog?
> > > "Unable to authenticate to AFS because no such entry"
> > > 
> > > It's not that my password is incorrect because if I use a wrong password I get 
> > > "Unable to authenticate to AFS because password was incorrect"
> > > 
> > > I've completed all steps from the Quick Beginnings Guide in order to create a user (multiple times) and now I can't authenticate, which means that in order to make any adjustments I have to create the NoAuth file. Can someone help me, because I'm at a loss here...
> > > 
> > > Thanks, 
> > > 
> > > Pieter-Paul Giesberts.
> > > _______________________________________________
> > > OpenAFS-info mailing list
> > > OpenAFS-info@openafs.org
> > > https://lists.openafs.org/mailman/listinfo/openafs-info
> > 
> > -- 
> >        Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory
> >        Member, MIT Student Information Processing Board  (SIPB)
> >        URL: http://web.mit.edu/warlord/    PP-ASEL-IA     N1NWH
> >        warlord@MIT.EDU                        PGP key available
> 
> -- 
>        Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory
>        Member, MIT Student Information Processing Board  (SIPB)
>        URL: http://web.mit.edu/warlord/    PP-ASEL-IA     N1NWH
>        warlord@MIT.EDU                        PGP key available

-- 
       Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory
       Member, MIT Student Information Processing Board  (SIPB)
       URL: http://web.mit.edu/warlord/    PP-ASEL-IA     N1NWH
       warlord@MIT.EDU                        PGP key available