[OpenAFS] Kerberos with AFS

Derek Atkins warlord@MIT.EDU
21 May 2001 12:45:21 -0400


Did you create an AFS Service Key in your KDC, with the proper name
(either 'afs' or 'afs.your-cell'?)  Did you propagate said key to
all your AFS servers?

-derek

Madhuri Athota <madhuria@yahoo.com> writes:

> I have done kinit and i got the TGT. But if i do
> afslog I am getting an error message saying
>  " afslog: Failed getting tokens for cell -h in realm
> (local realm)."
> Do i need to create a user with name afs and instance
> as mycellname(like stanford.edu), to make Kerberos
> work with AFS? I actually tried this but still it is
> not working.
> 
> -Thanks
> Madhuri
> 
> 
> 
> --- Derek Atkins <warlord@MIT.EDU> wrote:
> > You need to 'kinit' to get your kerberos TGT, and
> > then
> > you need to use 'aklog' of 'afslog' or an equivlant
> > to
> > obtain the appropriate afs service ticket from the
> > KDC
> > and stuff it into the kernel as a token.
> > 
> > -derek
> > 
> > Madhuri Athota <madhuria@yahoo.com> writes:
> > 
> > > Hi,
> > >   But Migration kit is for Kerberos5. I want some
> > info
> > > for Kerberos4 with AFS as i have Kerberos4
> > installed
> > > on my m/c.
> > > 
> > > Thanks,
> > > Madhuri.
> > > 
> > > 
> > > --- Martin Schulz
> > <schulz@iwrmm.math.uni-karlsruhe.de>
> > > wrote:
> > > > Madhuri Athota <madhuria@yahoo.com> writes:
> > > > 
> > > > > Hi,
> > > > >   I have installed Kerberos and it is working
> > > > > properly. I also have AFS client and server
> > > > installed.
> > > > > I stopped Kaserver so now only kerberos is
> > > > running. 
> > > > > Now i want to get AFS tokens. Can anyone tell
> > me
> > > > > detailedly how to use Kerberos server with
> > AFS. 
> > > > 
> > > > The only way I know of is Ken Hornsteins
> > migration
> > > > kit. 
> > > > 
> > > > See in the FAQ for the URL.
> > > > 
> > > > Yours,
> > > > -- 
> > > > Martin Schulz                            
> > > > schulz@iwrmm.math.uni-karlsruhe.de
> > > > Uni Karlsruhe, Institut f. wissenschaftliches
> > > > Rechnen u. math. Modellbildung
> > > > Engesser Str. 6, 76128 Karlsruhe
> > > 
> > > 
> > > __________________________________________________
> > > Do You Yahoo!?
> > > Yahoo! Auctions - buy the things you want at great
> > prices
> > > http://auctions.yahoo.com/
> > > _______________________________________________
> > > OpenAFS-info mailing list
> > > OpenAFS-info@openafs.org
> > >
> >
> https://lists.openafs.org/mailman/listinfo/openafs-info
> > 
> > -- 
> >        Derek Atkins, SB '93 MIT EE, SM '95 MIT Media
> > Laboratory
> >        Member, MIT Student Information Processing
> > Board  (SIPB)
> >        URL: http://web.mit.edu/warlord/   
> > PP-ASEL-IA     N1NWH
> >        warlord@MIT.EDU                        PGP
> > key available
> 
> 
> __________________________________________________
> Do You Yahoo!?
> Yahoo! Auctions - buy the things you want at great prices
> http://auctions.yahoo.com/
> _______________________________________________
> OpenAFS-info mailing list
> OpenAFS-info@openafs.org
> https://lists.openafs.org/mailman/listinfo/openafs-info

-- 
       Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory
       Member, MIT Student Information Processing Board  (SIPB)
       URL: http://web.mit.edu/warlord/    PP-ASEL-IA     N1NWH
       warlord@MIT.EDU                        PGP key available